WHAT WE KNOW ABOUT YOU.
Short version: we count visitors, we remember your account and your room, and if you order something we keep your address so we can post it to you. We don't run ads, we don't sell anything about you, and we don't store your IP address.
WHO IS RESPONSIBLE
The data controller for onlyibee.com is Ibrahim AMIAN, publishing as Only Ibee, Paris, France. Contact for anything on this page: contact@onlyibee.com.
Full identity and contact details are held by the site's host and disclosed to any authority that requests them — see the mentions légales.
WHAT WE COLLECT, AND WHY
| What | When | Why / legal basis |
|---|---|---|
| Email address and password | Only if you create an account | To run your account. Performance of a contract. The password is handled and hashed by Supabase Auth — we never see it. |
| Nickname, room layout, favourites, badges, listening counts | While you use your account | So your profile and room follow you between devices instead of dying with one browser. Performance of a contract. |
| Name, email, postal address, order note | Only if you order something | To take the order and post the item. Performance of a contract, and a legal duty to keep sales records. |
| A random visitor ID, the page you're on, timestamps | Every visit | To count how many people come and which songs get played. Legitimate interest in knowing whether the work reaches anyone. |
| Approximate country and city | Every visit | Same. Worked out from your browser's own timezone setting — no location lookup, and your IP is not sent anywhere to get it. |
| A one-way hash of your IP | Every visit | Only to spot bot floods. It is a SHA-256 hash — it cannot be turned back into your IP, and the IP itself is never written down. |
That's the whole list. There is no advertising network, no tracking pixel, no profiling, and no automated decision-making anywhere on this site.
HOW LONG WE KEEP IT
- Account and profile data — until you delete your account, then it goes immediately.
- Orders — kept while the order is live, then retained as accounting records for the period French law requires (10 years).
- Visit records — deleted automatically after 14 months.
- Song plays — deleted automatically after 14 months.
WHO ELSE SEES IT
We don't sell or share your data. A few services are involved in making the site work, and they see what they need to:
- Supabase — the database and login system. Holds your account, profile and orders.
- GitHub Pages — serves the site's files. Sees your IP as part of delivering pages, as any web host does.
- PayPal and Stripe — only if you pay. You enter your card details on their pages; those details never touch this site and we never see them.
- YouTube — the TV page and video embeds, loaded in privacy-enhanced (no-cookie) mode.
- Google Fonts and jsDelivr — the site's fonts and a few code libraries are loaded from these, which means your browser contacts them and they see your IP.
Some of these are outside the EU. They operate under the transfer safeguards their own terms describe.
COOKIES & WHAT'S STORED ON YOUR DEVICE
This site sets no advertising or tracking cookies, which is why you aren't being asked to click a consent banner.
It does keep a few things in your browser's local storage so the site can work: your login session, your radio position and volume, your saved pieces, your badges, and a random visitor ID used only to avoid counting you twice. None of it is shared with anyone or used to follow you to other websites. Clearing your browser storage erases all of it.
YOUR RIGHTS
Under the GDPR you can ask us to:
- Show you the data we hold about you, as a copy.
- Correct anything wrong.
- Delete it — see below.
- Restrict or object to how we use it, including the visitor counting.
- Take it elsewhere in a portable format.
The fastest way to delete everything: sign in and use DELETE MY PROFILE at the bottom of your profile. It removes your account, nickname, room, saved pieces, badges and listening history straight away, and it cannot be undone.
Or email contact@onlyibee.com for any of the above and we'll answer within one month. If you think we've handled your data badly you can complain to the CNIL, the French data-protection regulator.
UNDER 15s
Accounts are not intended for children under 15. If you believe a child has made an account, email us and we'll remove it.
CHANGES
If this notice changes in a way that matters, the date below changes with it. Nothing here applies retroactively to data already deleted.
LAST UPDATED: 17 AUGUST 2026 · This notice describes what the site actually does, checked against the code. It is not legal advice.