Spotify Privacy Policy

Spotify · Official agreement

Read the agreement

21 of 98 cards in Data Access & Collection

Data Access & Collection · Company practice

Cookie Usage and Management

Spotify uses cookies, which are files saved on a user's device when they visit a website, and provides information on how it uses them and how users can manage their cookie preferences.

Supporting quotations

Cookies Policy: Information on how we use cookies and how to manage your cookie preferences. Cookies are files saved on your phone, tablet or computer when you visit a website.

data: device · purpose: service_operation

Data Access & Collection · Company practice

Account Creation Data Collection

Spotify collects personal data necessary to create a user account and enable use of the Spotify Service. The specific data collected depends on the service option, account creation method, country, and whether third-party services are used for sign-in.

Supporting quotations

Personal data that we need to create your Spotify account and that enables you to use the Spotify Service.
The type of data collected and used depends on the type of Service Option you have. It also depends on how you create your account, the country you are in, and if you use third party services to sign in.

Qualifications & exceptions

  • depends on the type of Service Option you have
  • depends on how you create your account
  • depends on the country you are in
  • if you use third party services to sign in

data: identifiers · data: demographics · data: location · purpose: service_operation

Data Access & Collection · Company practice

Street Address Collection and Use

Spotify may request and process a user's street address for various reasons, including checking eligibility for service options, delivering legal notices, providing support, billing, tax administration, and delivering physical goods.

Supporting quotations

We may ask for and process your street address for the following reasons:
to check eligibility for a Service Option
to deliver notices which are required by law
to deliver support options
for billing and tax administration
to deliver physical goods or gifts which you have purchased or requested

data: location · purpose: service_operation · purpose: legal_compliance

Data Access & Collection · Company practice

Third-Party Address Verification

Spotify may use a third-party application, such as Google Maps, to help verify a user's street address.

Supporting quotations

In some cases, we may use a third party application to help you verify your address, such as Google Maps.

Qualifications & exceptions

  • In some cases

data: location · purpose: service_operation · purpose: third_party_services

Data Access & Collection · Company practice

Usage Data Collection

Spotify collects personal data about how users access and use the Spotify Service, including information about their service option, actions within the service, browsing history, account settings, interactions with other users, prompts in AI features, transcripts, ad engagement, and use of third-party services/devices.

Supporting quotations

Personal data collected and processed about you when you’re accessing or using the Spotify Service.
your actions with the Spotify Service (including date and time), such as:
search queries
streaming history
playlists you create
your library
browsing history
account settings
interactions with other Spotify users
prompts in AI powered features
transcripts
engagement with ads
your use of third party services, devices and applications in connection with the Spotify Service

data: browsing · data: content · data: messages · data: device · purpose: service_operation · purpose: personalization · purpose: advertising

Data Access & Collection · Company practice

Content Provided by User

Spotify collects content provided by users when they participate in promotions (like contests) or post content to any part of the Spotify Service, including images, audio, text, titles, descriptions, and communications.

Supporting quotations

content you provide when participating in Spotify promotions, such as contests or sweepstakes
content you post to any part of the Spotify Service. For example: images, audio, text, titles, descriptions, communications, and other types of content

data: content · data: audio · data: photos · data: messages · purpose: service_operation

Data Access & Collection · Company practice

Technical Data Collection

Spotify collects technical data including URL information, online identifiers (like cookie data and IP addresses), and information about the devices used, such as device IDs, network connection type, provider, performance, browser type, language, digital rights management information, operating system, and Spotify application version.

Supporting quotations

URL information
online identifiers such as cookie data and IP addresses
information about the devices you use such as:
device IDs
network connection type (e.g. wifi, 4G, LTE, Bluetooth)
provider
network and device performance
browser type
language
information enabling digital rights management
operating system
Spotify application version

data: identifiers · data: device · data: browsing · purpose: service_operation · purpose: security

Data Access & Collection · Company practice

Third-Party Device and Application Discovery

Spotify collects information to discover and connect with third-party devices and applications, such as device name, identifiers, brand, and version. This includes devices on a user's Wi-Fi network (like speakers), devices made available by the operating system via Bluetooth/plugins, and Spotify partner applications.

Supporting quotations

information which enables us to discover and connect with third party devices and applications. Examples of this information are the device name, device identifiers, brand and version.
devices on your wifi network (such as speakers) which can connect to the Spotify Service
devices your operating system makes available when connecting via Bluetooth, plugin, and installation
Spotify partner applications to determine whether the application is installed on your device

data: device · purpose: service_operation

Data Access & Collection · Company practice

Device Sensor Data Collection

Spotify collects motion-generated or orientation-generated device sensor data if required for specific features of the Spotify Service. This data indicates how a user moves or holds their device.

Supporting quotations

Motion-generated or orientation-generated device sensor data if needed to provide features of the Spotify Service that require this data. This is data which your device collects about the way you move or hold your device.

Qualifications & exceptions

  • if needed to provide features of the Spotify Service that require this data

data: device · purpose: service_operation

Data Access & Collection · Company practice

Voice Data Collection

If voice features are available and a user chooses to use them, Spotify collects and processes audio recordings of their voice.

Supporting quotations

If voice features are available in your market and you’ve chosen to use a voice feature, we collect and process voice data. Voice data means audio recordings of your voice.

Qualifications & exceptions

  • If voice features are available in your market
  • if you’ve chosen to use a voice feature

data: audio · purpose: service_operation

Data Access & Collection · Company practice

Message Data Collection

If messaging is available and a user chooses to use it, Spotify collects and processes text or other content sent directly to another user.

Supporting quotations

If messaging is available in your market and where you’ve chosen to use messaging, we collect and process message data. Message data means text or other content you send directly to another user.

Qualifications & exceptions

  • If messaging is available in your market
  • where you’ve chosen to use messaging

data: messages · data: content · purpose: service_operation

Data Access & Collection · Company practice

Age Check Data Collection

Spotify collects Age Check Data when a user chooses to use an age-restricted feature or when a parent/guardian provides consent for a Managed Account. This can involve identity document verification (including a photo of the ID and potentially a photo of the face) or facial age estimation.

Supporting quotations

Age Check Data is the data you provide if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account (“Age Check”).
identity document verification: a photo of your identity document is used to confirm your age. In some cases, we may also use a photo of your face to verify that your ID belongs to you
facial age estimation: a photo of your face which is used to estimate your age

Qualifications & exceptions

  • if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account

data: demographics · data: photos · data: biometrics · purpose: service_operation

Data Access & Collection · Company practice

Payment and Purchase Data Collection

Spotify collects payment data when users make purchases or sign up for certain service options or trials. The specific data collected varies by payment method and includes name, date of birth, payment method type, card details (excluding full card number), ZIP/postal code, mobile phone number, and purchase/payment history.

Supporting quotations

If you make any purchases from Spotify or sign up for certain Service Options or a trial, we will need to process your payment data.
The exact personal data collected and used will vary depending on the payment method.
name
date of birth
payment method type (e.g. credit or debit card)
if using a debit or credit card, the card type, expiry date and certain digits of your card number. Note: For security, Spotify never stores your full card number
ZIP/postal code
mobile phone number
details of your purchase and payment history

Qualifications & exceptions

  • If you make any purchases from Spotify or sign up for certain Service Options or a trial

data: payment · data: demographics · data: location · data: identifiers · purpose: service_operation

Not stated here

  • The exact payment methods supported are not listed.

Data Access & Collection · Company practice

Survey and Research Data Collection

When users respond to surveys or participate in user research, Spotify collects and uses the personal data provided, as described in the specific survey or research.

Supporting quotations

When you respond to a survey or take part in user research, we collect and use the personal data you provide as described in the survey or research.

Qualifications & exceptions

  • as described in the survey or research

data: content · purpose: research

Data Access & Collection · Company practice

Customer Service Data Collection

Spotify collects information related to user contacts with Customer Service, such as chat conversations and email correspondence.

Supporting quotations

Information about your contacts with our Customer Service, such as chat conversations and email correspondence.

data: messages · purpose: service_operation

Data Access & Collection · Company practice

Account creation via other services

If you use another service to register or log into Spotify, that service will send your information to Spotify to help create your account.

Supporting quotations

If you register for or log into the Spotify Service using another service, that service will send your information to us. This information helps create your account with us.

purpose: service_operation

Data Access & Collection · Company practice

Payment data from partners

If you choose to pay through third parties or by invoice, Spotify may receive data from its payment partners to send invoices, process payments, and deliver purchased items.

Supporting quotations

If you choose to pay through third parties or by invoice, we may get data from our payment partners.
send you invoices
process your payment
give you what you’ve purchased

Qualifications & exceptions

  • If you choose to pay through third parties or by invoice

data: payment · purpose: service_operation

Data Access & Collection · Company practice

Purchase data from merchants

If Spotify directs you to a merchant, it receives data related to your purchase from that merchant to calculate commissions, analyze partnership effectiveness, and understand your interests.

Supporting quotations

If we direct you to a merchant, we receive data from the merchant that is related to your purchase.
calculate any commissions owed to us
analyze the effectiveness of our partnership with these merchant partners
understand your interests

Qualifications & exceptions

  • If we direct you to a merchant

data: payment · purpose: analytics · purpose: personalization

Data Access & Collection · Company practice

Data from advertising and marketing partners

Spotify receives data, including device identifiers and hashed contact information, as well as inferences about your interests and preferences, from advertising and marketing partners to deliver relevant ads and marketing and measure their performance.

Supporting quotations

We receive data about you from certain advertising or marketing partners, including device identifiers such as hashed contact information. They also provide us with inferences, which are the partners’ understanding of your interests and preferences.
This allows us to deliver more relevant ads and marketing and measure their performance.

data: identifiers · purpose: advertising · purpose: marketing

Data Access & Collection · Company practice

Data from acquired companies

Spotify may receive data about you from companies it acquires to enhance its services, products, and offerings.

Supporting quotations

We may receive data about you from companies we acquire. This is to enhance our services, products, and offerings.

purpose: service_operation

Data Access & Collection · Company commitment

No knowing collection of children's data

Spotify states it does not knowingly collect or use personal data from children under the applicable Age Limit, outside of Managed Accounts or Spotify Kids. If such data is discovered, Spotify will take reasonable steps to delete it, which may include deleting the child's account.

Supporting quotations

We do not knowingly collect or use personal data from children under the applicable Age Limit outside of Managed Accounts or Spotify Kids. If you are a parent or guardian and become aware that your child, who is under the application Age Limit, has provided personal data to Spotify in any other context, contact us. If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.

Qualifications & exceptions

  • outside of Managed Accounts or Spotify Kids
  • If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.

data: demographics · purpose: legal_compliance

Cross-references