Privacy policy

What we collect

• Screenshots you upload. We send them to an AI model to read the songs, artists and playlist names. We only store them if you tick “Show my screenshots on the roast page”, in which case they're kept with your roast so the people you share it with can see them.
• What the AI read, after your edits. Songs, artists, playlist names and any listening stats, plus the name you give the host and the heat level you pick.
• Your roast. The text the AI writes about you.
• Burns. When someone adds a burn to a roast, we store the name and text they enter, and how many fires it gets.
• Your station (an anonymous listener ID). The first time you get roasted, add a burn or fire a burn, we create a random ID for this browser. It isn't linked to your name, email or any account. With it we store which roasts and burns came from you, which burns you fired and your burn rank, so your station page can show them and nobody can fire the same burn twice. Other visitors never see which roasts are yours, unless you choose to compare a new roast with your last one, which links the two.
• Party games. When you play “Whose Taste Is It?”, we store the name you enter, the songs you add, the host's roast of them, your guesses and your score. Everyone in that room sees them during the game. Rooms close after a day, and are then deleted with everything in them, usually within a few hours.
• Party game device ID. When you join a party room, your browser creates a random ID and sends it with your name. We store only a one-way hash of it, with which questions, prompts and songs your device was shown, so later games in any room can deal you ones you haven't seen. It isn't linked to your name once the room is deleted, to your email or to any account, and each record is deleted 30 days after you last saw that item.
• Sync. When you play Sync, we store the name you enter, your songs, the song you pick for each question, any “why” you write, and your guesses. Only you and the other player see your picks and whys. Anyone with the link can see the finished card: both names, the score and the host's short read of your music, which may mention artists or genres but never a song title, your picks or your whys. Only your two song lists and the score are sent to the AI for the card; your whys never are. A Sync is deleted with everything in it 30 days after it starts.
• Visit counts and page speed. To see which features get used and where the site is slow, we count page visits and how fast pages load. For each one we store the kind of page (never the roast or room it's for), the site that linked you here, whether you're on a phone, tablet or computer, and load times. To count visitors without cookies, we mix your IP address and browser name with a random value that is deleted at the end of each day (UTC), so a visit can't be linked to you or to your visits on other days. We also count what happens in the app (a roast made, a game started or finished, an AI step that failed) without who did it or what it said. These counts are kept for 180 days.
• Feedback. If you send feedback, we store your message, the kind of page you sent it from and the email or handle you add, if any, and pass it on to the owner. It may also be passed to our AI service provider, together with the anonymous visit and app counts, when we use AI to analyse how the site is doing. Email [email protected] to have it deleted.
• IP addresses. We count requests per IP address to stop abuse and keep costs under control. These counts are deleted automatically within about two days.

We don't ask for your email, we don't have accounts (your station is just a random ID), and we never connect to your Spotify or any other music account. There are no ads, no third-party analytics and no tracking cookies.

What stays on your device

Your browser stores a few things locally: the private key that lets you delete your roast, your station's private key, the name you last used for a burn, which burns you've fired, your keys for party rooms you joined and your party game device ID. This never leaves your device except when you use it, for example when you delete your roast. We don't use cookies.

Who it's shared with

• AI service providers. Screenshots and song lists are sent to the third-party AI services that read them and write your roast. They process it only to send us a response.
• Apple. In the Year Drop party game, the titles and artists of the room's songs are looked up in Apple's public music search to find when they came out. Nothing else is sent: no names and nothing about the room.
• Service providers that run the site for us: hosting and the database, and getting feedback messages to the owner. They handle data only to provide that service.
• Anyone with your roast's link. Roasts are public to whoever has the link, including your screenshots if you chose to show them. Roast pages are marked so search engines don't list them, but anyone you share the link with can pass it on.

We never sell your data or share it for advertising.

How long we keep it

Roasts, their screenshots and their burns are kept until the roast is deleted. Your station is kept until you delete it from your station page. Which party game items a device has seen is kept for 30 days. Request counts by IP address are deleted within about two days.

Deleting your roast

The browser you made your roast in shows a private delete button on the roast page, and a delete link you can save to use on any other device. Deleting removes the roast, any screenshots and every burn, straight away. Copies cached by browsers or link previews can take up to an hour to disappear.

If you've lost your delete link, want a burn about you removed, or want to ask what we hold about you, email [email protected]. Since there are no accounts, we may ask you to show the roast is yours, for example by describing a screenshot in it.

Deleting your station

Your station page has a “Delete station” button. It removes your listener ID, rank and fires straight away. Your burns stay (without your rank on them), and your roasts stay until you delete them with their own delete links.

Children

Roast FM isn't meant for anyone under 13. If you think a child has used it, email [email protected] and we'll delete what they posted.

Keeping it secure

Uploads are checked and size-limited, delete keys are stored only as a scrambled fingerprint (a hash), and the site uses standard browser security protections. No system is perfectly secure, so please don't upload screenshots with things like messages, addresses or anything you'd mind strangers seeing.

Changes

If we change how we handle your data, we'll update this page and the date at the top. See also our terms.

Contact

Questions or requests: [email protected].