Privacy

Rhiannon has no account and nothing to learn about you. What it measures is anonymous and counted on a machine of mine. This page says exactly what is collected, by whom, and what you can demand.

Last updated: 10 September 2026

Who is responsible

Rhiannon is made by Dereje, a person, not a company. For any question, or to exercise your rights: d.getu@icloud.com.

What the app collects about you: nothing

Rhiannon creates no account with us. Your listens, your settings and your review queue live on your device, and in your own iCloud if you use it, which we have no access to. We don't see what you listen to: no title, no artist, no album and no Last.fm username ever reaches us.

What the app measures

How the app is used, anonymously, counted by Aptabase on an instance of mine hosted in the European Union. Not the company's servers, and no analytics company in between.

What is recorded: the app was opened, which of the four screens you moved to, that a card was opened and of which kind — track, artist or album —, which chart and over which period, that listens were sent and how many, that the waiting room was decided and on how many listens, that a setting was changed and to what, that a cover was saved, and that the app was opened from the widget.

Never what any of it was about: no title, no artist, no album, no username, nothing you typed. To each event the tool adds the operating system and its version, the app version, the device model, and the country guessed from the connection, which is then dropped. No cookie, no advertising identifier, no device identifier, no account, nothing that would recognise you from one session to the next, and nothing joined to anything else. The app sends no event it hasn't been written to send.

Legal basis: legitimate interest (GDPR article 6.1.f), knowing which parts of the app are used, and on what. Kept for: 12 months.

What the site measures

Anonymous usage statistics, counted by a small tool of my own, hosted in the European Union. No analytics company is involved, and nothing about you leaves for anywhere else. What it records: pages viewed, where the visit came from, country, kind of device. No cookie, no identifier, no profile, nothing cross-referenced with anything else, and nothing that would recognise you from one visit to the next.

Legal basis: legitimate interest (GDPR article 6.1.f), knowing whether the page is read. Kept for: 12 months.

What we don't do

• No account to create with us.
• No advertising, no ad network, no pixel.
• No tracking from one app or site to the next, no profiling.
• No advertising identifier, no device identifier, no fingerprint.
• Nothing sold, nothing shared for commercial ends.

The services the app talks to

To do its work the app calls four services from your device. Those exchanges fall under those services' own privacy policies, not ours.

Last.fm

Your account. The app sends your listens there and reads back your history, your charts, the write-ups and the worldwide counts. Signing in goes through Last.fm itself: your password never passes through Rhiannon. Their policy.

Apple Music

The catalogue, the links that open a track, and your device's play history. All of it through MusicKit, with your permission. Their policy.

Deezer

A record's details and clean cover art. The app searches the catalogue by title and artist; nothing in the request identifies you. Their policy.

LRCLIB

The lyrics. Same thing: a search by title and artist, with no identifier. Their policy.

Where the data lives

On your device, and in your own iCloud if you have it switched on: your space, encrypted by Apple, which we cannot reach. Your listening history lives at Last.fm: that is your account, and you manage or delete it from their site.

One thing worth saying plainly: Last.fm has no delete API. A listen that has been sent cannot be taken back by the app; their site removes them by hand, one at a time. That is why Rhiannon asks you to approve anything it isn't sure of before it goes.

Your rights

Since nothing we hold identifies you, most of these rights are exercised where the data actually lives: in your device's settings, and on your Last.fm account.

Beyond that, you have a right of access, rectification, erasure, restriction, objection and portability over data concerning you. Write to d.getu@icloud.com; we answer within a month. If the answer doesn't satisfy you, you may complain to your data protection authority. In France, the CNIL, at cnil.fr.

Changes

If this policy changes, the date at the top changes with it. Nothing is altered retroactively.