Legal & Privacy
Legal notice
Provider information under section 5 of the German Digital Services Act (DDG)
Stefan Weiß
Stephon Vice – music website
Sacco-Vanzetti-Straße 7
16547 Birkenwerder
Germany
Contact: 
Responsible for editorial content, where section 18(2) MStV applies: Stefan Weiß, address as above.
Privacy
Privacy
Updated: 6 October 2026
Controller
Stefan Weiß, Sacco-Vanzetti-Straße 7, 16547 Birkenwerder, Germany. Contact: .
Website and hosting
Technical connection data, including IP address, access time, requested page, browser and operating system, is processed to deliver and protect this website. The intended public hosting provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The basis is Article 6(1)(f) GDPR, our legitimate interest in secure operation. IONOS states that web hosting logs use anonymised IP addresses and are retained for up to eight weeks.
Invitations and accounts
The operator enters your name and email address to invite you personally, using information obtained through personal contact with you. Account data includes name, email, group (user/friend), active status and a password hash. Passwords are not stored in plain text. The bases are Article 6(1)(f) GDPR for personal invitations and Article 6(1)(b) GDPR for the account access you request. Account details are required for sign-in; the public music offering is fully accessible without an account. Account data is retained until the account is deleted. You may request deletion from the operator.
Sign-in and recovery
Essential cookies store a random sign-in token and protection against cross-site requests. Persistent sign-in is renewed during use; cookies and corresponding sign-ins last up to one year without renewal. Sign-out, account suspension and password changes end the relevant or existing sign-ins. The bases are Article 6(1)(b) and (f) GDPR and section 25(2)(2) TDDDG. A hash of your IP address and attempt counts are evaluated for up to 15 minutes to prevent repeated login attempts and cleaned up on subsequent requests. A password recovery request is retained in the management area until handled or the account is deleted. No automatic email is sent.
Newsletter
If you voluntarily subscribe, we store your email address, consent date and text version, and any later unsubscribe date. The basis is Article 6(1)(a) GDPR. You can withdraw consent in your profile or by email at any time; previous lawful processing remains unaffected. The address is used for music news until you unsubscribe. Consent evidence is retained to resolve legal claims for no longer than three years after the end of the year in which you unsubscribe (Article 6(1)(f) GDPR). Automated newsletter delivery is not configured yet.
Music statistics and device storage
We count playback starts, listening time and substantially completed songs. Short-lived playback events expire after 24 hours and are removed on the next statistics request; daily totals per song are retained to assess the music offering. They are not linked to your account. The basis is Article 6(1)(f) GDPR, our legitimate interest in improving the music offering. No analytics cookies are used. Your chosen language is saved locally until browser data is cleared. App use may store public application files locally for startup; audio files, account data and administration are not stored offline.
Contact, recipients and rights
Contact messages are retained to handle your request and deleted when completed unless retention is legally required (Article 6(1)(b) or (f) GDPR). The operator and necessary hosting/email providers have access. External links, such as Spotify, send data to the external service only when opened.
Under the GDPR you have rights to access, rectification, erasure, restriction and portability, subject to applicable conditions. You may object to processing based on legitimate interests for reasons relating to your particular situation (Article 21 GDPR). Please contact the address above. You may complain to a data protection authority, particularly the Brandenburg Commissioner for Data Protection and Access to Information (www.lda.brandenburg.de). No automated decision-making or profiling takes place.
Cloudflare connection
We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to securely deliver and protect the main domain. Cloudflare processes connection information such as IP address, time and requested URL, along with transmitted requests and responses, including account information contained in sign-in requests. The basis is Article 6(1)(f) GDPR, our legitimate interest in secure and reliable delivery. Processing in the US and other countries is possible. Information on international transfers and safeguards is available at https://www.cloudflare.com/privacypolicy/. MP3 files are delivered directly through the encrypted IONOS subdomain. The gateway creates no custom persistent request or content log; Cloudflare processes technical operational and security data under its applicable privacy terms.
Automatic language selection
On your first visit, we use the approximate country determined by Cloudflare from your IP address to suggest German or English. Only the language code is passed to our website for this purpose. If country information is unavailable, we use your browser language. Your manual language choice is saved in your browser’s local storage and takes priority. We do not keep a country history for this feature.
Invitations and accounts: Invitation links can be used once and are valid for 7 days. We store the link hash, name, email, password hash, access group and browser sessions. To manage account access, we also store the date and number of successful sign-ins. The legal basis is Article 6(1)(b) GDPR. Music and player views are publicly available. View changes are counted only as daily totals per view, without linking them to an account. Song statistics are also not attributed to named users. Account data is removed when the account is deleted; contact the operator to request deletion. Sign-in persists on your own device until you sign out, access is blocked or browser data is cleared.
Favorites and self-registration: You can create a regular account with your name, email address and password. Registration does not grant access to friends-only content. When signed out, favorites are stored only in this device's local browser storage and can be removed by clearing browser data. On sign-in, favorites saved on this device are merged into your account and stored there for use on your devices. They are not linked to anonymous listening statistics. The queue applies to the current browser tab and is held in session storage. You can remove favorites and queued songs yourself at any time. Password requests are still handled by the operator; no automatic confirmation or password email is sent.
Responsible for editorial content, where section 18(2) MStV applies: Stefan Weiß, address as above.
Privacy
Privacy
Updated: 6 October 2026
Controller
Stefan Weiß, Sacco-Vanzetti-Straße 7, 16547 Birkenwerder, Germany. Contact: .
Website and hosting
Technical connection data, including IP address, access time, requested page, browser and operating system, is processed to deliver and protect this website. The intended public hosting provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The basis is Article 6(1)(f) GDPR, our legitimate interest in secure operation. IONOS states that web hosting logs use anonymised IP addresses and are retained for up to eight weeks.
Invitations and accounts
The operator enters your name and email address to invite you personally, using information obtained through personal contact with you. Account data includes name, email, group (user/friend), active status and a password hash. Passwords are not stored in plain text. The bases are Article 6(1)(f) GDPR for personal invitations and Article 6(1)(b) GDPR for the account access you request. Account details are required for sign-in; the public music offering is fully accessible without an account. Account data is retained until the account is deleted. You may request deletion from the operator.
Sign-in and recovery
Essential cookies store a random sign-in token and protection against cross-site requests. Persistent sign-in is renewed during use; cookies and corresponding sign-ins last up to one year without renewal. Sign-out, account suspension and password changes end the relevant or existing sign-ins. The bases are Article 6(1)(b) and (f) GDPR and section 25(2)(2) TDDDG. A hash of your IP address and attempt counts are evaluated for up to 15 minutes to prevent repeated login attempts and cleaned up on subsequent requests. A password recovery request is retained in the management area until handled or the account is deleted. No automatic email is sent.
Newsletter
If you voluntarily subscribe, we store your email address, consent date and text version, and any later unsubscribe date. The basis is Article 6(1)(a) GDPR. You can withdraw consent in your profile or by email at any time; previous lawful processing remains unaffected. The address is used for music news until you unsubscribe. Consent evidence is retained to resolve legal claims for no longer than three years after the end of the year in which you unsubscribe (Article 6(1)(f) GDPR). Automated newsletter delivery is not configured yet.
Music statistics and device storage
We count playback starts, listening time and substantially completed songs. Short-lived playback events expire after 24 hours and are removed on the next statistics request; daily totals per song are retained to assess the music offering. They are not linked to your account. The basis is Article 6(1)(f) GDPR, our legitimate interest in improving the music offering. No analytics cookies are used. Your chosen language is saved locally until browser data is cleared. App use may store public application files locally for startup; audio files, account data and administration are not stored offline.
Contact, recipients and rights
Contact messages are retained to handle your request and deleted when completed unless retention is legally required (Article 6(1)(b) or (f) GDPR). The operator and necessary hosting/email providers have access. External links, such as Spotify, send data to the external service only when opened.
Under the GDPR you have rights to access, rectification, erasure, restriction and portability, subject to applicable conditions. You may object to processing based on legitimate interests for reasons relating to your particular situation (Article 21 GDPR). Please contact the address above. You may complain to a data protection authority, particularly the Brandenburg Commissioner for Data Protection and Access to Information (www.lda.brandenburg.de). No automated decision-making or profiling takes place.
Cloudflare connection
We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to securely deliver and protect the main domain. Cloudflare processes connection information such as IP address, time and requested URL, along with transmitted requests and responses, including account information contained in sign-in requests. The basis is Article 6(1)(f) GDPR, our legitimate interest in secure and reliable delivery. Processing in the US and other countries is possible. Information on international transfers and safeguards is available at https://www.cloudflare.com/privacypolicy/. MP3 files are delivered directly through the encrypted IONOS subdomain. The gateway creates no custom persistent request or content log; Cloudflare processes technical operational and security data under its applicable privacy terms.
Automatic language selection
On your first visit, we use the approximate country determined by Cloudflare from your IP address to suggest German or English. Only the language code is passed to our website for this purpose. If country information is unavailable, we use your browser language. Your manual language choice is saved in your browser’s local storage and takes priority. We do not keep a country history for this feature.
Invitations and accounts: Invitation links can be used once and are valid for 7 days. We store the link hash, name, email, password hash, access group and browser sessions. To manage account access, we also store the date and number of successful sign-ins. The legal basis is Article 6(1)(b) GDPR. Music and player views are publicly available. View changes are counted only as daily totals per view, without linking them to an account. Song statistics are also not attributed to named users. Account data is removed when the account is deleted; contact the operator to request deletion. Sign-in persists on your own device until you sign out, access is blocked or browser data is cleared.
Favorites and self-registration: You can create a regular account with your name, email address and password. Registration does not grant access to friends-only content. When signed out, favorites are stored only in this device's local browser storage and can be removed by clearing browser data. On sign-in, favorites saved on this device are merged into your account and stored there for use on your devices. They are not linked to anonymous listening statistics. The queue applies to the current browser tab and is held in session storage. You can remove favorites and queued songs yourself at any time. Password requests are still handled by the operator; no automatic confirmation or password email is sent.