Privacy policy

Xtoca team

Account data (if you create an account):

• Email address
• Username (nickname)
• First and last name
• Country
• Phone number (if provided)
• Gender (if provided)
• Age range (if provided)
• Favorite radios
• Profile preferences

Technical data:

• Chosen language and theme
• Cookie consent
• Device type and browser
• Country (national level only)
• Anonymous visitor identifier (visitor_id) for statistics if accepted
• Page views (only if statistics are accepted)

Contact form data:

When you use the contact form, Xtoca collects the name, email address, subject, message and technical metadata needed to process and secure the request.

Cookies and analytics:

Xtoca stores your cookie choices and, if accepted, anonymous analytics data such as page views and device information.

Payment data (donations):

Xtoca may record the status, amount, currency, PayPal transaction ID and date of the donation. No bank card data is stored by Xtoca.

• Creating and managing the user account
• Authentication and security
• Managing favorites and profile
• Audience statistics (with consent)
• Processing donations
• Improving the application
• Compliance with legal obligations

• Consent — for optional cookies and statistics
• Performance of a contract — for account-related features
• Legitimate interest — for security and essential service operation
• Legal obligation — where required by law (accounting, etc.)

Under the GDPR, you have the following rights:

• Right of access to your data
• Right of rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to withdraw your consent at any time

To exercise your rights, use the contact form available on Xtoca. We may ask you to prove your identity before processing the request.

• Account data and favorites: kept as long as the account exists
• Cookie consent: kept until modification or expiry
• Statistics data: kept only for as long as necessary
• Payment data: kept in accordance with legal and accounting obligations

You can delete your account at any time from the "Profile" page. Your profile data and favorites will be deleted. Payment records may be anonymised if the law requires it for accounting purposes.

Xtoca implements appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or alteration.

If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the CNIL (French data protection authority). — www.cnil.fr.