Effective August 3, 2026. Questions: gardeners@wearewalledgarden.com
This policy covers Walled Garden on the web and the Walled Garden apps for iOS and Android; all collect the same data, described below. The Walled Garden website is owned and operated by Haspari LLC, a Wyoming company, which is the controller of the data described here. The mobile applications are published and operated by Resonant Labs on the same terms and under the same policy. Questions or privacy requests: gardeners@wearewalledgarden.com.
Account details (name, email), subscription and payment status (payments are processed by Stripe; Walled Gardennever sees card numbers), and listening events (which tracks you played, for how long, in what order, and whether a song was skipped or played through, along with the browser or app you played them in). Listening data is the basis of user-centric payouts. It is what makes your money follow your ears. Skip and song-order patterns are used only as anonymous aggregates pooled across all listeners, to make radio and discovery better for everyone. If you switch on “Learn from my listening” in your account, radio will also use your own history (your recent plays, your skips, who you follow) to shape your stations. It is yours only, off by default, and it stops the moment you turn it off.
To operate streaming, calculate artist allocations, produce your monthly receipt, prevent fraud (IP addresses are stored only as salted hashes), and publish aggregate transparency reports. We do not sell personal data, run advertising, or share your individual listening with anyone; artists see only aggregate counts.
We do not sell your data and we do not run advertising. To operate the service we rely on a small set of vendors who process data on our behalf under contract, and who may only use it to provide their service to us:
We keep this list current, and material changes are announced with other terms changes.
If the law where you live gives you privacy rights, we honor them. You can ask to see the data we hold about you, correct it, delete your account and personal data, or receive a copy of your data in a portable form. To exercise any of these, email gardeners@wearewalledgarden.com or, for listener accounts, use /account/delete.
We process your data on these bases: to provide the service you signed up for (the contract between us); to meet legal and accounting obligations, including keeping allocation records behind money paid to artists; and, for fraud prevention and basic security, our legitimate interest in running an honest platform. Personalized recommendations run only on the consent you give by turning them on, and stop when you turn them off. If you are in the EEA or UK, you may also complain to your local data protection authority.
We do not sell your personal information and we do not share it for cross-context behavioral advertising, as those terms are used in US state privacy laws. Because we do not sell or share, there is nothing to opt out of, and your rights to access and delete your data still apply and are described above.
We are based in the United States, and our vendors may process data in the United States and elsewhere. Where we move data out of the EEA or UK, we rely on the approved standard data protection safeguards for that transfer.
Aggregates only: stream counts, listener counts, listening time, and earnings. If you join an artist's mailing list, that artist sees the email you chose to share.
Listening records are retained because they are financial allocation records. If you are a listener you can delete your account at any time at /account/delete (or from the app's You page). Artist and label accounts have licences and payouts attached to them, so those are closed by emailing gardeners@wearewalledgarden.com and we do it with you. Either way: personal identifiers, saved payment details, likes, playlists, and follows are erased immediately, while anonymized allocation history is preserved for artist payment integrity. We keep your account details for as long as your account is open. After deletion, anonymized allocation and listening records are kept indefinitely because they are the accounting record behind money already paid to artists, and they no longer point at you. Residual copies in encrypted backups age out on our normal backup cycle.
The service requires users to be at least 13 (16 in the EEA and UK) and is not directed at children. We do not knowingly collect personal information from anyone under 13; if you believe a child has an account, contact us and we will delete it.
Three, all first-party, all set by us. wg_session keeps you signed in. wg_tzoff stores your time zone offset so a month lines up with your calendar rather than ours. wg_refis set for 30 days when you arrive through an artist's invite link, so that if you join we know who to credit and can say so in your welcome email.
No tracking pixels, no third-party analytics, no ad tech, and none of these follow you to other sites.