Privacy policy
This describes exactly what Norsolia does with data. If the service changes, this page changes with it.
Who runs this
Norsolia, an independent studio project, not yet incorporated. The only contact channel is the form.
What we store, and why
- Account: your email, display name and a hashed password (scrypt). To sign you in and own your shows.
- Your content: the shows, episodes, metadata and audio you upload. This is the service.
- Sessions and tokens: a session id per sign-in and a hash of each API token.
- Play counts: per episode and per day, a number, plus a salted hash of the User-Agent for up to seven days to avoid double-counting within five minutes. We do not store IP addresses; the gateway in front of the app does not pass them to us.
- Messages: anything you send through the contact form or a waitlist, with the email you gave.
What we do not store
- No IP addresses, no advertising or analytics identifiers, no third-party cookies.
- No payment data: there are no payments.
- No listener identity. A play count is a floor, not a list of people.
Cookies and email
One strictly necessary session cookie after you sign in; see the cookie policy. Norsolia sends no email: no newsletter, no verification. We reply to the form from a mailbox a person reads.
How long, and your choices
Account and content data stay until you delete them. Expired sessions and the short-lived User-Agent hashes are cleared automatically. From the dashboard you can export a ZIP of everything, or delete a show or the whole account after confirming your password. Each region stores its own data and does not copy it to the others.