1. Data We Collect
When you use Playlist Backup, we may collect the following information:
1.1. Data from Spotify API
To provide our backup service, we request access to certain data from your Spotify account, but only with your explicit consent. This may include:
- Spotify Account Information: A unique identifier from Spotify to link your backup to your account.
- Saved Songs & Playlists: We access your saved tracks and playlists to generate a CSV backup, and store the resulting backup (see 3. Data Storage & Security below).
- Listening History: We may access your listening history to provide additional features, such as backup by date range.
1.2. Spotify API Permissions (Scopes)
When logging in with Spotify, you will be asked to grant certain permissions (scopes) that allow us to access the necessary data for your backup.
- The exact permissions requested will be shown on Spotify’s authentication page before you approve access.
- You can review and revoke these permissions anytime via your Spotify account settings.
1.3. Cookies and Tracking
We use cookies to:
- Authenticate your session.
- Ensure website functionality and performance.
- Analyze website usage to improve our service (anonymized analytics).
You can disable cookies in your browser settings, but some features may not function properly.
1.4. Google Analytics & User Data
We use Google Analytics 4 to better understand how users interact with our website. This includes:
- Google Signals: If enabled, we receive aggregated data from signed-in users who have consented to ad personalization, including device, location, and activity data.
- User-ID Tracking: When applicable, we may assign a non-personally identifiable user ID to track sessions across devices.
- User-Provided Data: With your consent, hashed first-party identifiers (such as email) may be used to enrich analytics data and improve ad performance.
All data is handled in accordance with Google's policies and with the necessary privacy disclosures and user consent. Users may manage their data via their Google account at myactivity.google.com.
1.5. First-Party Usage Statistics
We also keep our own, non-personalized usage statistics to understand how the service is used (for example how many backups or imports happen per day). These are collected entirely on our own servers:
- No IP addresses, browser user agents, full referrer URLs, playlist names or song names are stored.
- The data is not shared with any third party and is not used for advertising or profiling.
- Raw statistic entries are deleted after at most 12 months; only anonymous daily totals are kept beyond that.
2. How We Use Your Data
We use your data strictly to:
- Generate your Playlist Backup and Liked Songs Backup CSV files, and store them in your account so you can re-download a past backup without reconnecting to Spotify.
- Run automated scheduled backups and email them to you, for Pro accounts that enable this feature.
- Process payments and manage subscriptions for Supporter and Pro accounts.
- Improve and optimize our website.
- Provide customer support if needed.
We do not sell, trade, or share your data with third parties for marketing purposes.
3. Data Storage & Security
- We store basic account information necessary for login functionality, such as:
- User ID: A unique identifier from either Spotify or Google, used to manage your account.
- Display Name: Your public name from Spotify or Google, used to personalize your experience.
- Generated backups: When you back up a playlist or your Liked Songs, we store the resulting CSV in our database — including the track names, artist names, and playlist name it contains — tied to your account. This lets you re-download a past backup from your profile at any time without reconnecting to Spotify, and lets scheduled backups be emailed to Pro accounts. We keep this data until you delete your account (see "Your Rights" below); there is currently no separate automatic expiry.
- We do not otherwise store your full Spotify library, playback or listening history, or any Spotify data beyond what a backup you explicitly request contains.
- Billing information: Payment details (card numbers, invoices) are handled entirely by our payment processor, Stripe — we never see or store them. We store only your Stripe customer and subscription identifiers and your subscription status, so we can manage your Supporter or Pro access.
- Spotify connection tokens: If you choose to connect your Spotify account (to list and back up your own private and collaborative playlists), we store the Spotify access and refresh tokens encrypted at rest. They are used only to read your playlists on your behalf when you back them up; we never post to or change your Spotify account. You can disconnect at any time from your profile, which deletes these tokens, and they are also deleted when you delete your account. Access tokens are short-lived and refreshed automatically; the encrypted refresh token is kept until you disconnect.
All stored data is kept secure and used only for authentication, functionality, billing, and support purposes. We do not share this information with third parties for marketing.
4. Third-Party Services
- Spotify API: We use the official Spotify API to access your data. Your interaction with Spotify is subject to Spotify’s Privacy Policy.
- Google Analytics: We use Google Analytics 4 to collect anonymized usage statistics and improve our service. See Google’s Privacy Policy for more information.
- Stripe: We use Stripe to process payments and manage subscriptions for Supporter and Pro accounts. Stripe collects and processes your payment details directly; we never see or store your card information. See Stripe’s Privacy Policy for more information.
5. Your Rights
- You can disconnect your Spotify account at any time, preventing further access.
- You can request data deletion of any stored records by contacting us at contact@playlist-backup.com
- You may manage your Google data via myactivity.google.com.
- You may delete all of your data — including your stored playlist and Liked Songs backups — and your account, under the /user page.
6. Updates to This Policy
We may update this policy occasionally
7. Contact Us
For any privacy-related inquiries, please contact us at: contact@playlist-backup.com