Privacy Policy

Last updated: September 2026

1. Who we are

Signal Club is a lo-fi internet radio station operated by DVCE Studios, registered at the Dutch Chamber of Commerce (KVK) under number 81231016, address: Molenveld 13–15, Laren (Gld), the Netherlands.

Contact: info@signalclub.live

Signal Club acts as the data controller for personal data collected through signalclub.live.

2. What data we collect and why

Data	Purpose	Legal basis	Retention
Email address (newsletter)	Send weekly frequency updates	Consent (Art. 6(1)(a) GDPR)	Until unsubscribe
Name, email, music link, note (transmit form)	Review music submissions	Performance of a request (Art. 6(1)(b) GDPR)	12 months
Meta Pixel — browsing behaviour, events, ad conversions (Pixel ID 2184611815462827)	Measure ad performance and reach	Consent (Art. 6(1)(a) GDPR + Telecomwet Art. 11.7a)	Per Meta's policy (up to 180 days)
Spotify embed (iFrame API)	Music playback in the browser	Consent via user interaction (clicking "tune in")	Per Spotify's policy
Artist images (Spotify CDN — i.scdn.co)	Display artist photos in the discovery section on the homepage	Legitimate interest (Art. 6(1)(f) GDPR)	Not stored by us; standard CDN request
IP address, request logs	Security and abuse prevention (Cloudflare)	Legitimate interest (Art. 6(1)(f) GDPR)	Up to 24 hours (Cloudflare default)

3. Cookies and tracking

We use the Meta Pixel (ID: 2184611815462827) to understand which marketing activities bring visitors to Signal Club and to measure ad performance. The Pixel script is initialised in revoked-consent mode on every page load, meaning no data is sent to Meta until you explicitly accept cookies by clicking I'm Chill in the cookie banner. If you click No Thanks, consent stays revoked and no tracking data is sent.

Once you accept, the following events may be sent to Meta:

• PageView — fired on each page load immediately after consent is granted or confirmed from a previous session.
• Lead + SpotifyClick — fired when you click "Play on Spotify" on a station page (/p/*).
• AppleMusicClick — fired when you click "Listen on Apple Music" on a station page (if the button is shown).
• YouTubeMusicClick — fired when you click "Listen on YouTube Music" on a station page (if the button is shown).

Your consent choice is stored in your browser's localStorage (key: sc_consent_v1) for 12 months. You can change your preference at any time via the Cookie settings link in the footer.

The Spotify music player (iFrame embed) is loaded only after you click "tune in" or a station preset button. Until that moment, no connection is made to Spotify's servers for playback.

Artist images in the discovery section on the homepage are fetched from Spotify's image CDN (i.scdn.co) when that section loads. This is a standard CDN image request — your IP address reaches Spotify's CDN servers, but no playback data or personal profile information is shared with Spotify as a result.

4. Third-party processors

• Meta Platforms Ireland Ltd. — Meta Pixel analytics and ad measurement (Pixel ID 2184611815462827). Meta Privacy Policy.
• Spotify AB — Music playback via the Spotify iFrame API; artist images served from the Spotify CDN (i.scdn.co). Spotify Privacy Policy.
• Cloudflare, Inc. — Hosting, DNS, CDN, and DDoS protection. All web traffic passes through Cloudflare's network. Traffic logs (including IP addresses) may be retained for up to 24 hours. Cloudflare Privacy Policy.

We do not sell personal data to any third party.

5. Data transfers outside the EU

Meta and Spotify process data in the United States. Both companies rely on Standard Contractual Clauses (SCCs) as a transfer mechanism under Art. 46 GDPR. Cloudflare processes most EU traffic within the EU through its anycast network, though some data may be processed in the US.

6. Your rights

Under GDPR, you have the right to:

• Access — request a copy of your personal data we hold.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email info@signalclub.live. We will respond within 30 days.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch data protection authority, AP).

7. Newsletter

When you subscribe to Nomi's Signal, we store only your email address. We use this solely to send you Signal Club updates — new frequencies, handpicked tracks, and station news. We do not share your email address with third parties for marketing purposes. You can unsubscribe at any time via the link in every email or at /api/unsubscribe. Your email address is deleted within 30 days of unsubscribing.

8. Music submissions (/transmit)

When you submit music via /transmit, we collect your name, email address, a Spotify or SoundCloud link, and an optional note. This data is stored securely and used solely to review your submission. We may reply to your email address to let you know the outcome. Submissions are deleted after 12 months, or earlier upon request. We do not share submission data with third parties.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be announced via the newsletter where applicable.