Privacy Policy

Last updated: January 22, 2026

This Privacy Policy explains how Rosty collects, uses, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable European and Spanish data protection laws.

1. Data Controller

The data controller responsible for personal data processed through this website is:

Rosty

Independent project operated from Spain

Contact email: [email protected]

For legal purposes, the responsible natural person operating this website may be identified to competent authorities or upon formal legal request, in accordance with applicable law.

2. Personal Data Collected

Rosty may collect and process the following personal data:

  • Email address
  • Username
  • User-generated content (playlist titles, descriptions, comments)
  • Account status
  • Technical and usage data (IP address, browser type, device information, basic logs)

Rosty does not store credit card details or banking information.

3. Purpose of Data Processing

Personal data is processed for the following purposes:

  • Creating and managing user accounts
  • Allowing users to create, publish, and share playlists
  • Managing optional account features
  • Ensuring the security, stability, and proper functioning of the platform
  • Responding to user requests, inquiries, or legal obligations

4. Legal Basis for Processing

Personal data is processed based on one or more of the following legal grounds:

  • User consent
  • Performance of a contract (account creation and use of the service)
  • Compliance with legal obligations
  • Legitimate interest in maintaining platform security and preventing abuse

5. Third-Party Services

Rosty relies on third-party services that may process personal data according to their own privacy policies, including but not limited to:

  • Cloudflare (security, performance, and CDN services)
  • Google AdSense (advertising)
  • Google Analytics (usage analytics)
  • SoundCloud (music playback via embedded widgets)
  • MyAnimeList (manga-related information)

Some of these providers may process data outside the European Economic Area under appropriate safeguards.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this policy, or until the user deletes their account.

Certain technical or legal data may be retained for limited periods where required by law or for legitimate operational reasons.

7. User Rights

Under the GDPR, users have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of their personal data ("right to be forgotten")
  • Object to or restrict certain processing activities
  • Request data portability

Users may exercise these rights by contacting [email protected].

8. Account Deletion

Users may delete their account at any time through their profile settings.

Upon account deletion:

  • Personal data will be removed or anonymized
  • Public user-generated content may be removed or dissociated from the account
  • Certain minimal technical data may be retained where legally required

9. Minimum Age Requirement

Rosty is intended for users aged 14 years or older. By creating an account, users confirm that they meet this minimum age requirement.

10. Changes to This Policy

Rosty reserves the right to update this Privacy Policy at any time. Users will be notified of significant changes through the website or their account, where appropriate.

11. Contact

For any questions regarding this Privacy Policy or the processing of personal data, users may contact:

📧 [email protected]