Each show: its address, title, description, author, category, language and settings, and your contact email.
Each episode: its title, description, number, season, length, size and publish time, and its audio file.
The artwork of each show.
For each episode, how many downloads it had in each day. See below.
A secret address for each show. It is the key to the private feed.
What other people can see
Anyone can read the feed, the page and the audio of a public show. The feed has the title, description, author, category, artwork and episodes. It has your contact email only if you turn that on in the settings of the show.
A private show has no public page and no public feed. Only a person who has the secret feed address can get its episodes. The artwork of a private show can be read by anyone who has its address, but the address is long and random.
Podcast apps and directories, such as Apple Podcasts and Spotify, keep their own copy of what the feed shows. We cannot delete those copies.
Download counts
A download counts when an app asks for an episode from the start. One listener counts once for one episode in one day. Known crawlers do not count.
To count one listener once, the server makes a hash. It mixes the address and the browser of the listener with the episode, the day and a secret random value for that day. The server stores only the hash. It never stores or logs the address. It deletes the hash and the secret value after two days. After that, nothing in the counts can lead to a listener.
In your browser
When you choose an audio file, your browser reads its length. When you choose artwork, your browser reads its size. Nothing is sent for this until you upload the file. The page stores nothing in localStorage, sessionStorage or IndexedDB.
How long it stays
Your data stays until you delete it. You can delete an episode, a show, or your whole account. A deleted show loses its episodes, audio files, artwork and counts at once. An upload that you start and do not finish is deleted after one day.
Delete my account
Sign in and choose "Delete my account". The server then deletes all your shows, episodes, audio files and artwork. It also deletes your sign-in account. This cannot be undone.
Your sign-in is shared with Kevin's other apps. So you are signed out of them too. A request goes to Kevin automatically. He deletes what those apps keep for your account soon after.
Signing in
To sign in you use Google (on Google's site) or a code sent to your email. The sign-in service keeps your email and sets a cookie on utilarium.app (and on kamadorueda.com when the sign-in goes through it) for 30 days. For details, read the sign-in section of Coro's privacy page. A listener does not sign in.
Where it runs
Podcast Host runs on Cloudflare. The records are in Cloudflare D1. The audio files and the artwork are in Cloudflare R2. Like any web host, Cloudflare sees the IP address and the page that each visitor asks for. To limit how fast one person can upload, Cloudflare counts requests by a hash of the email. We do not store or log addresses.
Analytics and error reports
Cloudflare Web Analytics can add a small script to the pages, to measure visits and speed. We do not control that script. Our own code sets no cookie and keeps no profile of you.
If the page has an error, it sends a report with the error message, page type and browser. It has no show, title, address or email. Cloudflare keeps technical request logs, with no IP address, for 7 days. For about 1 in 10 requests, Cloudflare also records the browser and operating system, the language, the network and an approximate location. These records hold no episode and no secret address.
