This page summarizes site-side processing relevant to analytics, cookies, and technical tooling. It does not replace the final legal review of the company privacy policy.
Gradientlabs Srl, VAT IT04596090231. For privacy requests or data subject rights: support@golden-radio.com.
This notice covers the site, firmware download, license activation, recovery, referral portal, and related operational emails.
Depending on the flow, the service may process email, Program ID, payment metadata, language preference, technical events, and analytics identifiers only after consent.
Admin and referral portal sessions are used for authentication and security.
Strictly necessary browser storage: `goldenradio_lang` for selected language, `goldenradio_payment_confirmed` for checkout completion UX, and `goldenradio_analytics_consent_v1` to remember your cookie choice.
The backend records technical and security-side events with hashing for IPs, emails, and Program IDs where applicable.
Browser-side PostHog stays disabled until you explicitly accept analytics.
Referral persistence and referral browser events are enabled only after analytics consent.
Browser-side session recordings remain disabled in this configuration, and revocation clears browser-stored referral identifiers.
The frontend no longer auto-loads Google Fonts, third-party flag images, or YouTube thumbnails/metadata before user interaction.
External links to YouTube, WhatsApp, and driver resources stay plain links and do not trigger network calls until clicked.
Stripe for checkout and payment processing.
PostHog only if browser-side analytics are enabled and accepted.
The production email provider: SendGrid, SMTP, or Gmail API.
Hosting and database providers used to deliver the service.
`telemetry_events` uses a 13-month retention window with scheduled purge.
Admin and referral sessions are time-limited.
Optional browser-side analytics and referral identifiers remain only while consent exists, until expiry, or until browser clearing.
Optional analytics require consent. Strictly necessary cookies and processing remain active to deliver the service, protect infrastructure, and manage sessions. You can change your choice at any time.
Full GDPR compliance still requires a finalized privacy notice, records of processing, operational retention controls, and legal review of the chosen legal bases.