Your account, your saved stations, kept on our own servers — not sold, not shared with advertisers.
Last updated · 17 August 2026
Phase accounts run on our own self-hosted sign-in service, and signing in is passwordless either way — there is no password for us to store, and none for you to lose. You can sign in two ways.
The first is with your email address: we send you a six-digit code, good for ten minutes, and you type it back into Phase. The code is the whole of it — nothing to remember, nothing to reuse somewhere else.
The second is Sign in with Apple. Apple vouches for you and hands us a stable identifier for your account, along with your name and email address the first time you sign in that way. We store the identifier, which is how we recognize you on every sign-in after the first. If you use Apple's Hide My Email, the address we receive is the relay one Apple generates for us — never your real one.
Either way, what we hold is an email address, used to sign you in, secure your account, and reach you if something needs your attention, and a profile name. If you came in through Apple, that name starts out as the one Apple gave us; either way you can change it to anything you like.
To send those account emails — verifying your address, sending your sign-in code — we use a third-party email provider, Resend, which processes your email address only to deliver the message. We never sell or share your data for advertising.
Phase remembers what you like. When you favorite a station — KEXP, say — it's added to your saved stations. When you tag a song that's playing, we store that song's metadata (title, artist, album) against your profile — that's your logbook — so you can find it again later.
This taste data lives inside your account. We don't use it for advertising, and we don't sell it or share it with third parties.
Phase offers a paid subscription as an in-app purchase. The purchase itself goes through Apple — Apple takes the payment, and we never see your card number, billing address, or any other payment detail.
What we do store is the receipt Apple hands back: a transaction ID, the product ID of what was bought, and the date the subscription expires. We keep those against your account so Phase knows what you're entitled to.
To keep that current, we ask Apple's App Store API whether a subscription has renewed, lapsed, or been refunded, and update our record to match. We identify the transaction to Apple, not you.
These purchase records are the one thing that outlives your account — we're required to keep them for accounting. See § vii below.
Phase runs on infrastructure we operate ourselves, at chillwolf.org. Your account, your saved stations, and your logbook are stored on our own servers. There's no third-party analytics platform or data broker sitting between you and Phase. We don't track you across other apps or websites, and we use no analytics or advertising SDKs.
To help you find stations, Phase pulls its station listings from a third-party radio directory. When you click to listen to a station, we let that directory know a station was played — but not who played it. Nothing that identifies you as an individual ever leaves Phase.
When you tune a station, Phase connects your device straight to that station's stream, the way any media player does — so the station's operator can see your device's IP address while you listen. We never send them your identity.
If you set an FM “home” to find stations near you, Phase stores the place you enter — as a name and approximate coordinates. It's entirely optional. Phase never reads your device's GPS or asks for location permission; you type the place in yourself.
We keep your account data for as long as your account exists. There's no clock running on your saved stations or your logbook — they stay put until you remove them yourself, or until you delete your account. We don't purge accounts that have gone quiet, either; if you don't open Phase for a year, everything will be where you left it.
When you delete your account, the records leave our live systems immediately. Copies linger in our backups, which rotate on a 30-day cycle — so within 30 days the last of it is gone. We never restore a deleted account from a backup.
Purchase records are the exception. Because they're accounting records, we have to keep them after an account goes away: the transaction ID, product ID, and expiry stay on our own servers for five years, which is what Washington State's record-keeping rules ask of us. What's left is a record of a transaction — not your saved stations, not your logbook, and no payment details, which we never had in the first place.
Our servers also write ordinary access logs, which include IP addresses, and we keep those for 30 days before they're deleted. They exist so we can diagnose problems and keep Phase secure. We don't use them to build a profile of you, and they're never joined to your taste data.
You can delete your account any time from the account menu in Phase. This removes your email address, profile name, saved stations, logbook, blocked stations, flags, and tuning preferences (including any FM home) from our live systems straight away, and from our backups within 30 days, as described above. It can't be undone.
The one thing that stays behind is the purchase records described in § vii — transaction ID, product ID, and expiry — which we're required to keep as accounting records. They're no longer attached to a profile, a logbook, or any saved stations, because by then those are gone.
Phase isn't directed to children under 13, and we don't knowingly collect their data.
Questions? Write to us at support@chillwolf.org.