Spotify uses cookies, which are files saved on a user's device when they visit a website, and provides information on how it uses them and how users can manage their cookie preferences.
Supporting quotations
Cookies Policy: Information on how we use cookies and how to manage your cookie preferences. Cookies are files saved on your phone, tablet or computer when you visit a website.
data: device · purpose: service_operation
Data Access & Collection · Company practice
Account Creation Data Collection
Spotify collects personal data necessary to create a user account and enable use of the Spotify Service. The specific data collected depends on the service option, account creation method, country, and whether third-party services are used for sign-in.
Supporting quotations
Personal data that we need to create your Spotify account and that enables you to use the Spotify Service.
The type of data collected and used depends on the type of Service Option you have. It also depends on how you create your account, the country you are in, and if you use third party services to sign in.
Spotify may request and process a user's street address for various reasons, including checking eligibility for service options, delivering legal notices, providing support, billing, tax administration, and delivering physical goods.
Supporting quotations
We may ask for and process your street address for the following reasons:
to check eligibility for a Service Option
to deliver notices which are required by law
to deliver support options
for billing and tax administration
to deliver physical goods or gifts which you have purchased or requested
Spotify collects personal data about how users access and use the Spotify Service, including information about their service option, actions within the service, browsing history, account settings, interactions with other users, prompts in AI features, transcripts, ad engagement, and use of third-party services/devices.
Supporting quotations
Personal data collected and processed about you when you’re accessing or using the Spotify Service.
your actions with the Spotify Service (including date and time), such as:
search queries
streaming history
playlists you create
your library
browsing history
account settings
interactions with other Spotify users
prompts in AI powered features
transcripts
engagement with ads
your use of third party services, devices and applications in connection with the Spotify Service
Spotify collects content provided by users when they participate in promotions (like contests) or post content to any part of the Spotify Service, including images, audio, text, titles, descriptions, and communications.
Supporting quotations
content you provide when participating in Spotify promotions, such as contests or sweepstakes
content you post to any part of the Spotify Service. For example: images, audio, text, titles, descriptions, communications, and other types of content
Spotify collects technical data including URL information, online identifiers (like cookie data and IP addresses), and information about the devices used, such as device IDs, network connection type, provider, performance, browser type, language, digital rights management information, operating system, and Spotify application version.
Supporting quotations
URL information
online identifiers such as cookie data and IP addresses
information about the devices you use such as:
device IDs
network connection type (e.g. wifi, 4G, LTE, Bluetooth)
Spotify collects information to discover and connect with third-party devices and applications, such as device name, identifiers, brand, and version. This includes devices on a user's Wi-Fi network (like speakers), devices made available by the operating system via Bluetooth/plugins, and Spotify partner applications.
Supporting quotations
information which enables us to discover and connect with third party devices and applications. Examples of this information are the device name, device identifiers, brand and version.
devices on your wifi network (such as speakers) which can connect to the Spotify Service
devices your operating system makes available when connecting via Bluetooth, plugin, and installation
Spotify partner applications to determine whether the application is installed on your device
data: device · purpose: service_operation
Data Access & Collection · Company practice
Device Sensor Data Collection
Spotify collects motion-generated or orientation-generated device sensor data if required for specific features of the Spotify Service. This data indicates how a user moves or holds their device.
Supporting quotations
Motion-generated or orientation-generated device sensor data if needed to provide features of the Spotify Service that require this data. This is data which your device collects about the way you move or hold your device.
Qualifications & exceptions
if needed to provide features of the Spotify Service that require this data
data: device · purpose: service_operation
Data Access & Collection · Company practice
Voice Data Collection
If voice features are available and a user chooses to use them, Spotify collects and processes audio recordings of their voice.
Supporting quotations
If voice features are available in your market and you’ve chosen to use a voice feature, we collect and process voice data. Voice data means audio recordings of your voice.
Qualifications & exceptions
If voice features are available in your market
if you’ve chosen to use a voice feature
data: audio · purpose: service_operation
Data Access & Collection · Company practice
Message Data Collection
If messaging is available and a user chooses to use it, Spotify collects and processes text or other content sent directly to another user.
Supporting quotations
If messaging is available in your market and where you’ve chosen to use messaging, we collect and process message data. Message data means text or other content you send directly to another user.
Spotify collects Age Check Data when a user chooses to use an age-restricted feature or when a parent/guardian provides consent for a Managed Account. This can involve identity document verification (including a photo of the ID and potentially a photo of the face) or facial age estimation.
Supporting quotations
Age Check Data is the data you provide if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account (“Age Check”).
identity document verification: a photo of your identity document is used to confirm your age. In some cases, we may also use a photo of your face to verify that your ID belongs to you
facial age estimation: a photo of your face which is used to estimate your age
Qualifications & exceptions
if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account
Spotify collects payment data when users make purchases or sign up for certain service options or trials. The specific data collected varies by payment method and includes name, date of birth, payment method type, card details (excluding full card number), ZIP/postal code, mobile phone number, and purchase/payment history.
Supporting quotations
If you make any purchases from Spotify or sign up for certain Service Options or a trial, we will need to process your payment data.
The exact personal data collected and used will vary depending on the payment method.
name
date of birth
payment method type (e.g. credit or debit card)
if using a debit or credit card, the card type, expiry date and certain digits of your card number. Note: For security, Spotify never stores your full card number
ZIP/postal code
mobile phone number
details of your purchase and payment history
Qualifications & exceptions
If you make any purchases from Spotify or sign up for certain Service Options or a trial
The exact payment methods supported are not listed.
Data Access & Collection · Company practice
Survey and Research Data Collection
When users respond to surveys or participate in user research, Spotify collects and uses the personal data provided, as described in the specific survey or research.
Supporting quotations
When you respond to a survey or take part in user research, we collect and use the personal data you provide as described in the survey or research.
Qualifications & exceptions
as described in the survey or research
data: content · purpose: research
Data Access & Collection · Company practice
Customer Service Data Collection
Spotify collects information related to user contacts with Customer Service, such as chat conversations and email correspondence.
Supporting quotations
Information about your contacts with our Customer Service, such as chat conversations and email correspondence.
data: messages · purpose: service_operation
Data Access & Collection · Company practice
Account creation via other services
If you use another service to register or log into Spotify, that service will send your information to Spotify to help create your account.
Supporting quotations
If you register for or log into the Spotify Service using another service, that service will send your information to us. This information helps create your account with us.
purpose: service_operation
Data Access & Collection · Company practice
Payment data from partners
If you choose to pay through third parties or by invoice, Spotify may receive data from its payment partners to send invoices, process payments, and deliver purchased items.
Supporting quotations
If you choose to pay through third parties or by invoice, we may get data from our payment partners.
send you invoices
process your payment
give you what you’ve purchased
Qualifications & exceptions
If you choose to pay through third parties or by invoice
data: payment · purpose: service_operation
Data Access & Collection · Company practice
Purchase data from merchants
If Spotify directs you to a merchant, it receives data related to your purchase from that merchant to calculate commissions, analyze partnership effectiveness, and understand your interests.
Supporting quotations
If we direct you to a merchant, we receive data from the merchant that is related to your purchase.
calculate any commissions owed to us
analyze the effectiveness of our partnership with these merchant partners
Spotify receives data, including device identifiers and hashed contact information, as well as inferences about your interests and preferences, from advertising and marketing partners to deliver relevant ads and marketing and measure their performance.
Supporting quotations
We receive data about you from certain advertising or marketing partners, including device identifiers such as hashed contact information. They also provide us with inferences, which are the partners’ understanding of your interests and preferences.
This allows us to deliver more relevant ads and marketing and measure their performance.
Spotify may receive data about you from companies it acquires to enhance its services, products, and offerings.
Supporting quotations
We may receive data about you from companies we acquire. This is to enhance our services, products, and offerings.
purpose: service_operation
Data Access & Collection · Company commitment
No knowing collection of children's data
Spotify states it does not knowingly collect or use personal data from children under the applicable Age Limit, outside of Managed Accounts or Spotify Kids. If such data is discovered, Spotify will take reasonable steps to delete it, which may include deleting the child's account.
Supporting quotations
We do not knowingly collect or use personal data from children under the applicable Age Limit outside of Managed Accounts or Spotify Kids. If you are a parent or guardian and become aware that your child, who is under the application Age Limit, has provided personal data to Spotify in any other context, contact us. If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
Qualifications & exceptions
outside of Managed Accounts or Spotify Kids
If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
data: demographics · purpose: legal_compliance
Cross-references
narrows (model-proposed): Account Creation Data Collection — No knowing collection of children's data restricts account creation data collection