laei.net is a small, handmade project: a quiet place for bedtime stories, lullabies and read-alouds. This page explains what information we collect, why we collect it, and the rights you always have. We try to say it plainly; if anything is unclear, write to us and we will explain.
Who we are
For the purposes of the GDPR and UK GDPR, the data controller is the team behind laei.net. You can reach us at privacy@laei.net for anything related to your data.
What we collect
- Account details — your email address, a chosen display name, and a hashed password. Optional: a profile picture and your preferred language.
- Listening activity — which stories you open, how far you listened, and which you saved. This is what lets the site remember where you left off and suggest the next story.
- Device and session data — your IP address, browser type, and a session cookie. We use this to keep you signed in and to keep the service safe from abuse.
- Messages you send us — if you email support, we keep that correspondence so we can help and remember context for follow-ups.
We do not collect health data, precise location, or biometric data. We do not fingerprint your device across sites, and we do not sell any data.
Why we collect it, and on what legal basis
- To run the service you asked for (account, playback memory, favourites) — on the basis of the contract between us.
- To keep the service safe and working (abuse prevention, debugging, security logs) — on the basis of our legitimate interest, balanced against your privacy.
- To communicate with you about service changes or safety issues — on the basis of our legitimate interest and, where required, your consent.
- To comply with the law — when we must respond to lawful requests or meet our legal obligations.
We never use your listening history to profile children or sell to advertisers.
Cookies
We use a small number of first-party cookies: one to keep you signed in, one to remember your language, and one to mitigate cross-site request forgery. We do not run third-party advertising cookies or trackers. See our Cookie Policy for the full list.
Who we share data with
We share the minimum necessary with a small set of processors that help us run the service: our hosting and database provider, our email sender for transactional messages, and an error-monitoring tool. Each of them is under a written data-processing agreement and may only use your data to provide the service to us. We do not share data with advertisers or data brokers.
International transfers
Our primary servers are in the European Union. If a processor stores or processes data outside the EEA or UK, we rely on Standard Contractual Clauses or an equivalent safeguard, and we note it on request.
How long we keep it
- Account data: for as long as your account is active, plus up to 30 days after deletion.
- Listening activity: rolling 24 months; older entries are aggregated and de-identified.
- Security logs: 90 days.
- Support correspondence: up to 3 years.
You can delete your account at any time from your settings; this starts the deletion clock immediately.
Your rights
Wherever you live, you have the right to:
- See a copy of the data we hold about you;
- Correct it if it is wrong;
- Delete it, unless we are legally required to keep it;
- Limit or object to how we use it;
- Take your data elsewhere in a machine-readable form;
- Withdraw any consent you have given, at any time.
To use any of these rights, write to privacy@laei.net. We reply within 30 days. You also have the right to complain to your local data-protection authority.
Children
Accounts are held by adults. Children listen through a parent's or guardian's account. For the full explanation of how we handle children's data, see our Children's Privacy Notice.
Security
Passwords are hashed with modern, salted algorithms. Traffic is encrypted in transit (HTTPS). Access to production data is limited to the people who need it, logged, and reviewed. We cannot promise perfect security — no one can — but we try to behave as if your data were our own.
Changes to this policy
When we make a material change, we bump the version number at the top of this page and email active account holders. Minor changes (typos, clearer wording) are quietly updated.
Contact
Privacy questions: privacy@laei.net. Anything else: our contact page.