If you are new (EU): You do not need to become a lawyer overnight. Start by reading your host’s privacy page and using their default player until you understand tracking.
Do this first
- Publish a simple privacy policy that says you use [host name] for audio and stats.
- Avoid pasting random marketing pixels on episode pages until you know if you need consent banners.
- Ask the host support: “Do you offer a DPA for EU customers?” Save the answer.
EU creators must treat listener analytics as personal data processing in many setups—especially IP-derived metrics and cookies on players.
Know what your host logs
Ask vendors for a DPA, subprocessors list, retention periods, and whether IPs are truncated. Document lawful basis (often legitimate interest with balancing test for analytics).
Consent and banners
Marketing pixels on your episode pages may need consent under ePrivacy. A minimal analytics setup sometimes avoids heavy cookie walls—design pages intentionally.
Transparency
Your privacy policy should name the podcast host stats product, what is collected, and retention. Link it from the footer and signup forms.
Transfers
If audio files or logs leave the EEA, ensure SCCs or adequacy decisions are in place—your DPA should say so.
Related reading
Legal pages on this site; technical guides.
Next step
Cubecast for EU-conscious hosting conversations.