Privacy Policy

Last updated 2026-10-15. Radio Island needs no account and has no tracking. The macOS app has no analytics at all and no server of its own; this website handles Pro purchases (see Payments below), and nothing the app stores leaves your Mac. This website counts anonymous visits and clicks so we can tell which pages are useful — the one exception below, and it is off until you allow it.

Network connections

Radio Island is an internet-radio app, so it makes network requests to the services below. Apart from Apple’s own services, they are third parties you connect to directly — not services that process data on the developer’s behalf.

• Radio Browser directory (*.api.radio-browser.info, HTTPS): on launch (station list refresh), when you search, and when you open a shared-station link. It receives your search text and filters, the app’s user-agent (which includes the developer contact email), and ordinary connection data such as your IP address. When you play a directory station, the station’s ID is reported once per session for Radio Browser’s public popularity count.
• The station’s streaming server: when you play a station, the broadcaster (and any CDN it uses) necessarily receives your IP address and user-agent and can see that you are listening. Radio Island does not control or see their logs. Some streams use unencrypted HTTP, so anyone on your network path can see which stream you play.
• Station logo hosts (HTTPS): when the Today’s Island card shows a logo, the host receives a normal image request from your IP address.
• Apple Music or Spotify (music.apple.com, open.spotify.com): only when you click “open in” on a song in the Song Log. The artist/title text is sent to that service as a search, in your browser. It is never sent in the background.
• Apple (map tiles, StoreKit): showing the map, and loading the price, buying or restoring Radio Island Pro. Handled under Apple’s privacy policy.
• Your mail app: only when you choose Report Station or Send Feedback. It opens a draft email that you review and send yourself.

Share links. A share link (https://radio-island.party/s/v1/…) is built on your Mac and copied when you choose Share. The app does not contact radio-island.party. Opening the link redirects to this page on felipegentil-labs.org. Whoever opens the link in a browser makes an ordinary request to this website, which serves a static page and keeps no account or profile.

Stored on your Mac only

In the app’s sandbox container:

• My Islands, history, folders, volume, display and appearance settings, Today’s Island pick, and stations that failed to play.
• Song Log: the song titles that stations announced while you listened, with the station and time. It is recorded locally only, is never exported or included in diagnostics, and is kept if Pro lapses.
• The last station list downloaded from Radio Browser.

Whether you have Radio Island Pro is read from StoreKit in the App Store version, and from the license key saved in your Mac’s Keychain in the version downloaded from this website. Deleting the app removes everything above.

Payments

Radio Island Pro is sold by Felipe Gentil Labs. Payments are processed by Stripe; we never see your card details. Stripe sends us the buyer’s email and order id so we can email the license key. We keep the order id, email and license key in our database, and a copy of the key in Stripe, so we can resend it. Emails are sent through Resend. The app does not contact any server to check the license.

An account is optional. If you create one, we store your email and a hashed password so you can see your licenses and downloads. To link past purchases to your account, we email a confirmation link to the address used to pay. Write to us to delete your account.

Website analytics

This marketing site counts anonymous visits and clicks, so that we can tell whether a page or a button is useful. It is the only analytics anywhere in Radio Island: the macOS app has none. The measurement is done with PostHog (PostHog, Inc.), acting as our processor, and it is switched off until you press Allow.

• What is sent: the page path — always reduced to /s/ for shared station links, so a station id never leaves your browser — an event name, a fixed button label and the place on the page it sits, a target URL with its query string and fragment stripped, coarse browser and device type, and a random id that exists only for the current page load.
• What is never sent: no cookies, no advertising or cross-site identifiers, no form or email contents, no license or payment ids, no station names, ids or coordinates, and no audio stream URLs. No user profile is created and nothing is used to identify you.
• Network requests: while analytics is on, your browser makes a small request to PostHog’s ingestion endpoint. PostHog necessarily receives your IP address to answer it; the project is configured to discard client IP data, so the address is not stored with the events and no location is derived from it.
• Retention: events are kept for the period the PostHog plan sets — one year on the free plan — and that period cannot be shortened. There is nothing personal in them to age out, and deleting the PostHog project removes all of them. Write to us and we will remove earlier.
• Your choice: we ask before loading anything, and nothing at all is requested before you answer. You can change or withdraw your answer at any time with Analytics settings in the footer of any page, which stops the reporting immediately. If your browser sends Do Not Track or Global Privacy Control we treat that as a refusal and never ask. Declining changes nothing about how the site works and does not affect downloads or purchases.

How much of this is legally required depends on where you are reading this from. We ask for your permission either way, because asking is the honest default.

What else this website and the pages ask for

• GitHub: this site asks GitHub for release information on its own behalf, so your browser does not contact GitHub to show the version or the changelog. A download is a plain redirect to the public GitHub release asset, which GitHub then serves.
• Typefaces, the demo map library and the analytics script are served from this site, not from a third party.
• Radio Browser: the shared-station page looks the station up by its id through this site, so your browser does not contact Radio Browser. Nothing else about it is requested, and the page never plays it.
• Radio stations: when you press play in the demo, your browser connects to that station’s stream directly. Nothing is streamed until you do.
• Download counting (RIS-111): the server keeps an anonymous count of /download requests — timestamp, path, country, user agent and referrer, with no IP address in any form and no cookies. It is an independent server-side counter and is unaffected by your analytics choice.

What the app collects

Nothing. The developer has no server the app contacts and receives no data from the app.

Contact

Questions or removal requests: [email protected].