Privacy Policy

• Data minimisation: only the data strictly required for each purpose is collected.
• Consent: no third-party advertising code is downloaded or executed before you have explicitly agreed. Direct sponsor banners are delivered by our own server, set no cookie, and are never affected by that choice.
• No cookie of our own: the identifiers used to measure the audience are kept in your browser's local storage, not in a cookie.
• Transparency: everything we process is listed below, with its purpose and its retention period.
• Limited retention: raw events are deleted automatically after 90 days, and only anonymised aggregates are kept longer.
• Your IP address is never stored in our database and is never written to any file by our application: it is read from the request, used locally to derive a country code, and immediately discarded. Our hosting provider keeps the standard connection logs of the server for security and operational purposes.
• No automated decision-making: nothing on this site produces a decision taken automatically about you, and we do not build advertising profiles of our own.

The site distinguishes two kinds of data: information kept on your own device that never reaches us (your favourites and your consent choice), and information transmitted to our servers to measure the audience.

Standard technical data: to answer a request, your browser necessarily sends your IP address, your User-Agent string and the page you are on. Only the User-Agent string is recorded. The IP address is used solely to derive the country code and is immediately discarded; the page you open is recorded as a page view.

1. Audience measurement — legitimate interest (Article 6.1.f GDPR). Our interest is to understand how the site is used, which stations are listened to and how often, in order to improve the catalogue and the playback. It is necessary because a random identifier generated by your browser, the page you opened, the country derived from your IP address and your User-Agent string are enough to do so: we store no IP address, set no cookie and share none of these data with a third party. The balance favours you because the data are pseudonymous, are deleted automatically after 90 days, are never used for advertising, and the published statistics are built on aggregates that contain no identifier. You may object at any time, as described in section 8.
2. Monetag — your consent (Article 6.1.a GDPR). The advertising code is not even downloaded before you accept: it is requested separately, only once the consent has been granted. You may withdraw this consent at any time, as described in section 4.
3. Direct sponsor banners — legitimate interest (Article 6.1.f GDPR). Our interest is to finance the site through direct sales. The banner is a static image delivered by our own server, and the impression and click counters are plain counters without any identifier: no cookie and no personal data are involved, and the visitor keeps seeing them whatever their choice about advertising.
4. Favourites — not processed by us. They stay in your browser and are never transmitted to our servers.
5. Operation and security of the service — legitimate interest (Article 6.1.f GDPR). Keeping the site available and secure requires our hosting provider to keep the standard connection logs of the server, which contain connection metadata such as the IP address.

Hotmix Live sets no cookie of its own. Your browser stores the following items, which never leave your device:

• hotmix.analytics.visitorId — a random identifier generated by your browser, used to count unique visitors.
• hotmix.analytics.sessionId and hotmix.analytics.started — the identifier of your current visit, kept for the duration of the tab.
• hotmix.favorite-radios — the stations you marked as favourites.
• hotmix.consent — your answer to the consent banner.

Direct sponsor banners are static images delivered by our own server. They set no cookie, contain no identifier and work the same way for every visitor. Clicking one simply opens the advertiser's website.

Monetag is the only advertising network used. Its code is requested only after you have accepted, and it is the only element of the site that can deposit cookies. Monetag then places its own advertising identifiers and cookies in your browser, in particular from the domain libtl.com and from the advertising domains it operates, whose names may change, and it serves the advertisements from third-party frames. If you refuse, no advertising script runs, no advertising cookie is deposited, and only the direct sponsor banners are offered to you.

Some parts of the site are served by third parties that are not advertising networks: the station logos come from an image CDN and the audio streams from the servers of the stations themselves. Loading them means your browser contacts those servers, which therefore receive your IP address.

You can review or change your choice at any time through the Privacy settings link in the footer. Refusing again stops the advertising from loading and removes the advertising scripts and frames from the page, but it never deletes the cookies the advertising network has already deposited: only your browser settings can remove them.

The website, its API and the database holding the audience data all run on a single server we operate ourselves, hosted in France. Audience data is never handed over to an external database provider. The following table lists the external parties whose servers your browser may contact.

Monetag acts as an independent controller for its own advertising purposes: it decides on its own how the data collected through its code are used, and it may transfer them outside the European Economic Area. According to its own privacy policy, transfers to the Isle of Man rely on the adequacy decision of the European Commission, while transfers to Hong Kong and to the United Arab Emirates, for which no adequacy decision exists, rely on the Standard Contractual Clauses. See Monetag's privacy policy, its cookie policy and its opt-out page.

Hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France — RCS Lille Métropole 424 761 419.

• Raw audience events (visit, page view, station played): 90 days, deleted automatically by the database itself.
• The technical receipts used to avoid counting the same event twice: 90 days, deleted automatically as well.
• Statistical aggregates (visits, page views by country and hour): kept without a fixed period, because they are anonymised and contain no visitor identifier.
• Favourites and consent choice: kept on your device only. The visitor and session identifiers are also stored on our servers for 90 days, as described above.
• Connection logs of the server: kept by our hosting provider for the duration of its own retention policy, which is a matter of its own security obligations.

You have the right to access, rectify, erase, oppose to, restrict and port your data. We respond within a maximum period of one month.

To exercise these rights, write to contact@hotmix.live and describe your request. To help us locate the events attached to you, quote the visitor identifier stored in your browser (local storage key hotmix.analytics.visitorId): we can then find the events recorded under that identifier and delete them. If you have cleared your browser data and no longer have the identifier, tell us and we will look for the events that can be linked to you.

Two limits apply to this request. The anonymous statistics (visits and page views by country and hour) hold no identifier, so they cannot be traced back to you and can only be deleted as a whole. And the counters of the advertising slots contain no identifier either.

You may also lodge a complaint with your national data protection authority, the CNIL in France.

Because the audience measurement and the direct sponsor banners rely on a legitimate interest, you may object to them at any time, on the same terms as the other rights, by writing to contact@hotmix.live. We will then stop the processing concerned and delete the data attached to you.

For any question about this policy, write to contact@hotmix.live.

This policy may be updated as the site evolves. The version in force is the one published on this page, whose last update date appears at the top of the document.