ⓘ Listening time is collected in only one tab at a time within the same browser profile and TENALIA origin, including background listening. It is not collected without supported browser locks. Devices and separate browser profiles are not combined. Interruptions can cause missing measurement seconds; music playback is unchanged.
Measurement stays off until you explicitly consent. Allow or disable it at any time under Privacy settings. Your choice is saved in this browser across reloads and sign-outs, not account-wide. Clearing browser data requires a new choice; analytics stays off until consent. All features remain usable without measurement.
Measurement covers limited login and upload events, active time and listening seconds. Random session identifiers, no names, email addresses, song contents or screen recordings. Session identifiers are not automatically anonymous.
Raw data is deleted within seven days. Turning measurement off discards unsent events; already sent data follows the retention period. Summaries are restricted to authorised operators with two-factor authentication. Protected daily summaries of successful and failed logins without session identifiers are retained for up to twelve calendar months. Small groups remain suppressed. We ask for consent again for this change; an existing refusal remains effective.
Metrics are incomplete and do not count unique people. Small groups are suppressed. Missing data does not mean zero errors. Quality plays and charts are separate.
Account changes reset the measurement session and queue, but preserve the browser preference. Active time is counted for at most one tab. Operator and excluded test accounts are not measured. Operator access is logged separately with account ID and timestamp.
