Privacy & support

iPhone & iPad app privacy policy

Listening stays on your device

The installed app includes its rooms, artwork, and music generation on your device. It does not send your listening activity to us, run advertising or analytics, or track you across apps and websites. It does not request access to your microphone, camera, contacts, location, or photo library.

Listening preferences, selected rooms, day/night and weather choices, mixtapes and their names, and discovery/quest progress are saved in the app’s local storage. We do not receive a copy. There is no Lofi Years account or cloud profile associated with this information.

Storage and deletion

Local data remains until you change it, use an available delete control, or delete the app through your device’s Settings. Offloading the app can preserve its data. Apple separately manages device backups, restores, and backup deletion through its settings. We cannot access or delete a copy stored only on your device.

Sharing and external links

When you copy or share a room, its link contains the room and listening settings you chose to share. The system Share sheet sends it to a destination you select. Lofi Years does not automatically post anything or read your contacts. The receiving app or service handles the link under its own privacy policy.

Opening a link to our website or social profile is optional. Once you visit a website, its network, cookie, and analytics practices apply. The website policy below describes lofiyears.com; those website analytics are not included in the bundled app’s listening interface.

Apple services

Apple manages App Store interactions, device backups, and system diagnostics under its own privacy settings and policies. No third-party advertising, analytics, or crash-reporting service is integrated into the Lofi Years app. Information you send us for support is covered by the contact section below.

Website privacy policy

This section applies when you visit lofiyears.com in a browser, including on a phone or tablet. The website generates music in your browser and uses local storage, first-party visitor statistics, Google Analytics, and ordinary server logs as described here. This privacy page itself loads neither Google Analytics nor the visitor/listening counter.

Your settings and browser storage

Your room, sound mix, weather, motion and other listening preferences, saved mixtapes and their names, and discovery/quest progress are stored in your browser. The visitor statistics service does not upload mixtape names, your saved library, or discovery/quest progress. Clearing site data removes these local settings; it does not delete records already held on a server.

Visitor counts and listening statistics

The main rooms, About page, and Halloween page send our server a random browser identifier, a temporary tab identifier, the current room or page, playback state, and heartbeat/leave updates. Updates occur while the page is open and when you change rooms or start or stop playback. The browser identifier is saved under lofi-years-visitor in local storage and persists until you clear it.

We use these updates to show how many browsers are here and in each room, count visits and returning browsers, and estimate listening time and popular rooms. These are browser counts, not verified people. Public counters show totals; detailed statistics are restricted to the operator. Raw identifiers are used temporarily in memory for live counts. Persistent public-counter records use day-scoped hashes; private returning-visitor statistics use keyed hashes. These are pseudonymous: a retained hash can still link activity from the same browser within its retention period.

Live sessions expire after 90 seconds without a heartbeat and are cleaned up during subsequent service activity. Public daily visitor records and detailed daily visitor/room deduplication records are replaced on day rollover. Private returning-visitor hashes are removed after 90 calendar days without activity; daily aggregate counts and listening totals are removed once older than 365 calendar days. Cleanup runs on service startup or subsequent activity. The browser’s own identifier has no automatic expiry.

Google Analytics and cookies

The main, About, and Halloween pages also load Google Analytics to help us understand site use. It can receive page addresses, referrers, interactions, browser/device information, cookie identifiers, and network information. It uses cookies such as _ga to distinguish browsers and sessions. Google receives network information, including an IP address, when the browser connects; that information can be used to derive approximate location. Google’s documentation and privacy controls explain how its services handle that data.

The current website loads Analytics automatically on those pages and does not provide an on-site analytics consent or opt-out control. You can restrict third-party requests with browser privacy controls or a content blocker, and use Google’s Analytics opt-out browser add-on where supported. Blocking cookies alone does not necessarily prevent requests to Google.

Google Analytics user/event retention follows the property’s retention settings; standard aggregate reports can remain longer. We use reports to understand usage and improve the site. Contact us for the current retention setting or a deletion request. See how Google handles information from sites using its services and Google Analytics retention information.

Hosting, security, and access logs

Hosting and network providers process requests to deliver and protect the site. Web server access/error logs can include an IP address, requested address and query string, time, response information, referrer, and browser user agent. The visitor heartbeat endpoint has access logging disabled. Website logs rotate daily and keep 14 rotated files, ordinarily about two weeks; low-traffic files can remain longer because empty logs are not rotated. Relevant records may be retained longer when needed to investigate an incident or meet a legal obligation.

Sharing, outside services, and your choices

Shared room links contain the room and listening settings you select. Anyone with the link can read those settings. Links to X or Buy Me a Coffee take you to separate services with their own policies. Lofi Years does not collect payment-card details on this website. Information held by those services is managed through their own controls and support processes.

You can clear lofiyears.com site data in your browser to reset local preferences, cookies, and the visitor identifier. Returning to the website can create a new identifier and cookies. This does not opt you out of future statistics, and Google’s opt-out tool does not disable our separate visitor counter. A browser content blocker can block the /api/presence endpoint; playback works without that endpoint, although visitor counts will be unavailable.

Information is processed by the operator and the hosting/analytics providers needed for these purposes. Providers may process information in a country different from yours. This site does not offer advertising placements or user accounts. We may also disclose information when required by law or reasonably necessary to protect the service and its users.

Support and privacy requests

Contact Tommy Ferris through @tferris on X for app/website support or privacy requests. Keep sensitive information out of public posts. X handles your communications under its own privacy policy and account settings.

If you contact us, we use the information you provide to respond and resolve your request. We retain support correspondence only as long as needed for that purpose and applicable obligations. You may request access, correction, or deletion of information we hold about you. Depending on where you live, you may also have rights to object, restrict processing, receive a portable copy, or complain to a data-protection authority.

We may need enough information to verify a request and locate relevant records. We cannot identify every visitor from a name or social profile because the listening service does not ask for those details. We cannot retrieve data that exists only on your device, and clearing local storage does not automatically identify or remove previous server records. We will explain what we can do for your request and any applicable limits.

Children and policy updates

Lofi Years is a general-audience listening service. If you believe a child has provided personal information directly to us, contact us so we can review and address it. We update these policies when our practices change; the date above identifies this version. Material changes will be described on this page.