Privacy Policy

Dollhouse FM (“we”, “us”) provides shared radio stations, personal mixes and AI-generated music at fm.dollhouse.ai. This Privacy Policy explains how we handle information in the website, connected Dollhouse FM app and original Afterglow account-linking features.

We use information to provide accounts and playback, create the music and artwork you request, operate sharing and discovery, administer generation allowances, protect the service and investigate problems. For privacy, access, correction or deletion requests, contact help@dollhouse.ai. Do not include passwords, sign-in codes, session cookies or API keys in your message.

Dollhouse FM requests basic account identity, email and profile information for sign-in. It verifies Google’s sign-in response and stores your stable Google account identifier, email address and display name with an application account ID. Google handles your Google password. Signing in does not give Dollhouse FM access to Gmail, Drive, contacts, calendar or Spotify.

Google may include other standard profile claims in its sign-in response. The current application does not fetch or store a Google profile photo. It processes the temporary authorization code and ID token to authenticate you; it does not request offline access or save Google refresh tokens. Temporary sign-in state and verification information are stored to complete the login safely.

Google identifiers and email addresses are used for sign-in and account administration, not automatically added to generation prompts or published as profile fields. A verified session email also restricts host administration. Connecting an original Afterglow account requires a separate signed proof of ownership; matching an email address or display name alone does not claim someone else’s music. Connected Google sign-ins can open the same application account.

We store station names, genres, colors, public descriptions, private musical direction, references, energy/discovery settings, instrumental preferences and feedback; your chosen display name; station visibility and sharing identifiers; and recordings, titles, lyrics, artwork choices and generation metadata. Generated artwork records include visual briefs, images, animation tasks, technical reviews and provider job identifiers.

Account activity includes favorites and ratings, followed stations and DJs, station requests, playback bookmarks, My Mix source selections and preferences. Listening features record station and recording identifiers, listening-session identifiers, playback position and duration, timestamps, and events such as plays, likes, follows, skips and playback failures. A shared station uses one broadcast timeline for its listeners. Saved-song playback and My Mix do not create separate copies of the source recordings.

Sharing records random browser-generated visit identifiers, link-copy or destination-open actions, shared-link arrivals and teaser/full-song listening events. Opening a chat app does not tell us whether a message was sent. We use first-party activity records and aggregate counts to understand usage and diagnose problems; the app does not embed a third-party advertising tracker.

Creator accounts store station grants, generation reservations and delivered usage, welcome-premiere batches, return activity and automatic-preparation preferences. Historical access decisions and invitation/redemption records may remain for existing accounts. These records operate allowances, access controls and fair use.

We and our hosting and delivery providers process network requests, including IP addresses and request information. We use this information for sign-in security, abuse prevention and request limits. Service logs can contain request and error details separately from listening records.

New stations are created publicly. A public station can appear in discovery and shared links with its name, genre, artwork, public description, DJ display name, broadcasting status and aggregate listener/follower information. Recording pages can show titles, lyrics, duration and available playback/download links, including older recordings. Public recordings can be played in full without sign-in. Private and removed recordings retain their access controls. Automatic shared-link preview images include station artwork and song or station titles.

Until you choose a display name, a new station’s DJ byline can use the first part of the name supplied at sign-in. Chosen display names are not unique and do not establish account ownership. Changing your display name updates your station bylines.

The application does not publish your Google email/identifier, private musical-direction fields, reference notes, or your complete favorites/following list as public profile fields. A station request is visible to its DJ. A description or generated song may still reflect information you put into a prompt; avoid sensitive personal information in station text or lyrics.

My Mix starts with stations you follow and can be customized with public stations or your own private stations. A mix is private until you choose to share it. A shared mix lets anyone with its link see the included sources and listen to its timeline. A mix containing a private source cannot be publicly shared; adding a private source makes an existing shared mix private. Each source recording remains subject to its station’s access and removal rules.

Changes to station visibility or removal affect subsequent access through the service’s station, archive and media endpoints. They cannot retrieve recordings someone already downloaded or remove copies, links, screenshots or search-engine records held elsewhere.

We use service providers for hosting, storage, content delivery, AI generation, monitoring and support. They process the information needed to perform those functions, including account and session records, station content, listening and sharing activity, usage records and media files.

Creating music, station suggestions, descriptions or artwork can involve sending musical preferences, private station direction, relevant previous titles or lyrics, feedback, visual instructions and generated images to generation providers. Requests can also include station and job identifiers needed to deliver the result. We do not automatically include your Google identifier or email in these generation requests.

Our generation systems and providers can retain job records and produced media. Private station direction can therefore be processed by a provider even though it is not a public profile field. Generation is subject to creator allowances and capacity; ordinary public listening does not request new music.

Monitoring services process availability, error and performance information. Operational alerts sent to our team contain service status, error codes and station identifiers and are designed to omit prompt text, credentials and account emails. Our support platform receives listener-submitted bug reports with the additional information described below.

Historical account and content records can remain in the original Afterglow service, generation systems and backups. These copies are separate from the current service’s active records. Deleting content does not automatically erase every historical or backup copy.

“Bring your taste” opens ChatGPT, where you can use a connected Spotify account to find music preferences and station ideas. Dollhouse FM does not receive a Spotify access token or directly query your Spotify library in this workflow. It receives the station directions you review and save, including text you choose to paste.

External services you choose to use, such as sign-in and taste-import services, have their own applicable terms and data practices. Processing can occur in the countries where we and our service providers operate. We do not promise a particular storage country, regional residency, or generation provider’s training or retention settings.

Opening “Report a bug” captures a snapshot of the page, time, player version, browser/platform and viewport. If radio or saved-recording playback is active or buffering, it also captures player and recording identifiers, positions, playback rates, states, errors and a bounded history of recent playback events. The snapshot stays in the page until you choose to submit it. This does not record sound or request microphone access.

Pressing Submit report sends your description and technical snapshot to our team through our support platform, with the diagnostics attached. We filter automatically collected fields to exclude media source URLs, credentials, cookies and unrelated URL query parameters. Anything you type into the description is part of the report, so avoid adding sensitive information. Email support correspondence contains the message and contact details you choose to send.

Pending bug reports are stored so delivery can retry. After confirmed delivery to our support platform, the report body is removed from the delivery queue and a deduplication receipt is retained for seven days before scheduled cleanup. The delivered message and attachment are separate support records and are not deleted by that queue cleanup.

Dollhouse FM uses protected cookies to keep you signed in and complete sign-in and account linking securely. Application sessions currently expire after seven days and login/account-link flows after ten minutes. Anonymous playback uses a random listener cookie with a 24-hour lifetime to keep browser listening sessions separate; it does not grant account or generation rights. These validity limits do not mean every corresponding stored record or log is deleted at the same time.

Local storage remembers selected stations and playback positions; session storage holds import drafts, listener sequence information and sharing-visit identifiers. Playback diagnostics are held in page memory until submitted in a bug report. Clearing site data removes browser copies and may sign you out, but does not delete server-side accounts, recordings or submitted reports. Google manages its own sign-in cookies.

The connected mobile app uses the same account service and stores its sign-in credential in protected device storage. Media requests use that session where authorization is required. Signing out removes the app’s saved credential and revokes the corresponding application session.

You can change your display name, edit station settings and artwork, customize My Mix, remove favorites or follows, and remove completed recordings or stations through owner controls. Available actions depend on ownership, account access and whether generation is still in progress.

Removing a recording makes it unavailable through the service. Deleting a station first revokes access and stops new work. Already accepted generation may finish before cleanup removes the station’s records and associated audio/artwork that are not shared with another station. Minimal generation/accounting audit records, generation files, historical copies and backups can remain. Cleanup can require retries or manual attention.

There is no self-service whole-account deletion or erase-every-copy control. To request account deletion or removal of other data, email help@dollhouse.ai with the account you use and what you want removed, including station or recording links where relevant. We may need to verify that you control the account before acting. Requests are handled with regard to applicable privacy rights and any records needed for security, accounting, disputes or legal obligations; no immediate deletion of every historical, provider or backup copy is promised.

Signing out revokes that application session. Disconnecting an original account revokes its account sessions and disconnects its mapping; it does not delete the original stations or recordings. Removing the application’s access in your Google Account is not a request to delete your Dollhouse FM data. Contact the operator to discuss access, correction or deletion rights that apply to you.

Account, content, listening, account-linking and operational records do not all share one automatic deletion period. Expiration of a session, playback lease or temporary link does not necessarily delete its database row, logs or backups. Apart from specific cleanup described in this policy, we do not represent that all data is erased after a fixed number of days. Contact us to request removal or ask about a particular record.

We update this Privacy Policy as the service and its data handling change. The Last updated date identifies the current version. For questions about this policy or your information, contact help@dollhouse.ai.