Privacy & cookies

1. Controller

The controller for personal data processed via https://slowcast.net is the operator named in the Imprint.

2. What this service does

slowcast.net is a web player that embeds YouTube videos for ambient channels and optional YouTube or Spotify audio. You can use most of the site without creating an account with us.

3. Cookies

We use cookies only when you connect Spotify. They are required for that login to work:

• spotify_pkce_verifier — short-lived cookie used during the Spotify OAuth login (PKCE). Set when you start login; cleared after the callback.
• spotify_refresh_token — httpOnly cookie storing your Spotify refresh token so we can keep your session without showing the token to page JavaScript. Set after a successful login; removed when you disconnect.

These cookies are treated as strictly necessary for the Spotify feature you request. We do not use advertising or analytics cookies on this site today. If that changes, we will update this page and add consent where required.

4. Spotify

If you choose “Connect Spotify”, you are redirected to Spotify to authorize access (playback and related scopes). Spotify’s privacy policy applies to their processing: spotify.com/legal/privacy-policy. We receive tokens and basic profile information needed to run in-browser playback and show your signed-in state. You can disconnect in the music sidebar; that deletes our refresh-token cookie.

5. YouTube embeds

Channel video and YouTube radio use YouTube iframe embeds. Loading those players may allow Google/YouTube to set cookies or collect data according to their policies: policies.google.com/privacy.

6. Hosting

The site is hosted on Vercel. Requests to the site are processed by Vercel’s infrastructure (including IP address and standard server logs) under their terms and privacy policy.

7. Your rights (EU / GDPR)

If the GDPR applies to you, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. To exercise these rights regarding data we control, contact the email in the Imprint. You may also lodge a complaint with a supervisory authority.

8. Changes

We may update this notice when the service or legal requirements change. The version on this page is the current one.