Privacy
This policy covers xavidiaz.music and xavidiaz.com. Short version: these websites don’t use cookies, analytics or any kind of tracking, and they don’t ask you for personal information.
Who is responsible
These websites are run by Javier Diaz Urbano (Xavi Diaz), Stockholm, Sweden, who is the data controller under the EU General Data Protection Regulation (GDPR). For any privacy question or request, email me@xavidiaz.com.
What is collected
Like any web server, the server hosting these sites receives technical information with every request — your IP address, the page requested, the time, and your browser’s user-agent. It is used only to deliver the site, keep it secure and troubleshoot problems, is not combined with other data, and is not shared with anyone. The legal basis is legitimate interest (GDPR Art. 6(1)(f)): running a website securely.
No cookies are set, nothing is stored in your browser, and there are no analytics, advertising or social media trackers. Fonts and images are served from this site’s own server. The recorded sets stream from Cloudflare’s storage service (R2), which, like any server, receives your IP address when you press play.
YouTube videos
The videos on this site are hosted by YouTube (Google). Nothing is loaded from YouTube until you press play on a video. When you do, the video is loaded from youtube-nocookie.com, and Google receives your IP address and may process data under Google’s privacy policy.
Links to other sites
Links to Instagram, Mixcloud, SoundCloud, YouTube, Twitch, Facebook and X take you to those services, whose own privacy policies apply from then on.
Your rights
Under the GDPR you have the right to access, correct or erase personal data about you, to restrict or object to its processing, and to data portability. Email me@xavidiaz.com to exercise any of them. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes
If this policy changes, the updated version will be published on this page. Last updated: 29 September 2026.