This policy applies to all Spotify streaming services, including use on any device, personalization, underlying infrastructure, account connections with other applications, free or paid streaming options, and other Spotify services like websites and customer service that link to this policy.
Supporting quotations
It applies to your use of:
all Spotify streaming services as a user.
From time to time, we may develop new or offer additional services. They’ll also be subject to this Policy, unless stated otherwise when we introduce them.
This Privacy Policy is distinct from the Spotify Terms of Use, which is a separate document outlining the legal contract, rules, and user rights for using the Spotify Service.
Supporting quotations
the Spotify Terms of Use, which is a separate document. The Terms of Use outline the legal contract between you and Spotify for using the Spotify Service. It also describes the rules of Spotify and your rights under your agreement.
Legal Rights & Agreement Rules · Context
Exclusion of Other Spotify Services with Separate Policies
This policy does not cover other Spotify services, such as Megaphone, that have their own distinct privacy policies.
Supporting quotations
about your use of other Spotify services which have their own privacy policy, such as Megaphone.
Account & Service Control · User right or choice
Account Privacy Controls
Users can control the processing of certain personal data through their Account Privacy settings.
Supporting quotations
Account Privacy: Control the processing of certain personal data.
Account & Service Control · User right or choice
Marketing Communication Settings
Users can manage which marketing communications they receive from Spotify through their Notification Settings.
Supporting quotations
Notification Settings: Set which marketing communications you get from Spotify.
purpose: marketing
Account & Service Control · User right or choice
Social and Content Settings
Users can control aspects of the Spotify Service, such as starting a Private session, sharing listening activity with followers, showing recently played artists on their public profile, and turning off messaging with other users, through the 'Social' settings in the Desktop and Mobile versions of Spotify.
Supporting quotations
Settings (found in the Desktop and Mobile versions of Spotify): Control certain aspects of the Spotify Service such as ‘Social’ or ‘Explicit Content’. On the ‘Social’ setting, you can:
start a Private session
choose whether to share what you listen to on Spotify with your followers
choose whether to show your recently played artists on your public profile
turn off messaging with other users (if messaging is available in your market)
Users can control whether explicit-rated content can be played on their Spotify account using the 'Explicit Content' setting.
Supporting quotations
On the ‘Explicit Content’ setting you can control whether explicit-rated content can be played on your Spotify account.
data: content · purpose: personalization
Data Access & Collection · Company practice
Cookie Usage and Management
Spotify uses cookies, which are files saved on a user's device when they visit a website, and provides information on how it uses them and how users can manage their cookie preferences.
Supporting quotations
Cookies Policy: Information on how we use cookies and how to manage your cookie preferences. Cookies are files saved on your phone, tablet or computer when you visit a website.
data: device · purpose: service_operation
Legal Rights & Agreement Rules · Company commitment
US State Privacy Rights Extended to All US Residents
Spotify commits to providing privacy rights, typically granted by certain US state laws, to all residents of the United States, regardless of their specific state of residence.
Supporting quotations
Certain U.S. states have adopted privacy laws that give certain rights to individuals over their personal data. We provide these rights to all residents of the U.S., regardless of where they live.
Qualifications & exceptions
to all residents of the U.S., regardless of where they live
Unresolved · User right or choice
Right to be informed about data processing
Users have the right to be informed about the personal data Spotify processes about them and how it is processed. Spotify fulfills this right through its Privacy Policy, information provided during service use, and by answering user questions.
Supporting quotations
Be informed of the personal data we process about you and how we process it.
Unresolved · User right or choice
Right to know and access personal data
Users have the right to request to know and access the personal data Spotify processes about them. They can do this by using the 'Download your data' tool or by contacting Spotify directly.
Supporting quotations
Request to know and access the personal data we process about you.
Unresolved · User right or choice
Right to correct inaccurate personal data
Users have the right to request that Spotify amend or update their personal data if it is inaccurate. This can be done by editing their profile in their account or by contacting Spotify.
Supporting quotations
Request that we amend or update your personal data where it’s inaccurate.
Unresolved · User right or choice
Right to delete certain personal data
Users can request the deletion of certain personal data. However, Spotify may be unable to delete data if it's necessary for the original purpose, for fraud protection, due to legal obligations, or for establishing/exercising/defending legal claims.
Supporting quotations
Request that we delete certain of your personal data.
Qualifications & exceptions
Please note there are situations where Spotify is unable to delete your data, for example when: it’s still necessary to process the data for the purpose we collected it for
we have an overriding interest in continuing to process the data, for example where we need the data to protect our services from fraud
Spotify has a legal obligation to keep the data
Spotify needs the data to establish, exercise or defend legal claims. For example, if there’s an unresolved issue relating to your account
Unresolved · User right or choice
Right to opt out of tailored advertising
Users have the right to opt out of the processing of their personal data for tailored advertising. This can be done through the 'Tailored Ads' setting in their account or via a link on the website footer if not logged in.
Supporting quotations
Request to opt out of the processing of your personal data for tailored advertising.
purpose: advertising
Unresolved · User right or choice
Right to data portability
Users have the right to request a copy of their personal data in an electronic format and to transmit that data for use with another service.
Supporting quotations
Request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service.
Unresolved · Company commitment
Right not to be subject to automated decision making
Users have the right not to be subject to decisions based solely on automated processing, including profiling, that would have a significant legal or similar effect on them. Spotify states that it does not perform this type of automated decision-making.
Supporting quotations
Not be subject to a decision based solely on automated decision making (decisions without human involvement), including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
Spotify does not carry out this type of automated decision making in the Spotify Service.
Unresolved · User right or choice
Right to withdraw consent
Users can withdraw their consent for Spotify to collect or use their personal data if Spotify is processing that data solely based on their consent. This can be done by adjusting controls on Spotify or by contacting them.
Supporting quotations
Withdraw your consent to us collecting or using your personal data.
Qualifications & exceptions
if Spotify is processing your personal data solely based on your consent
Unresolved · Procedure
Handling of household requests
If all members of a household submit requests for access, correction, or deletion, Spotify will treat each request as an individual request.
Supporting quotations
If all the members of a household make an access, correction or deletion request, we will respond as if the requests are individual requests.
Unresolved · Procedure
Requests made through authorized agents
Users can designate an authorized agent to make requests on their behalf. Spotify will require proof of authorization from the agent and may ask the user to verify their identity directly.
Supporting quotations
You may designate, in writing or through a power of attorney (in accordance with local law), an authorized agent to make requests on your behalf to exercise your rights.
Qualifications & exceptions
in writing or through a power of attorney (in accordance with local law)
Before accepting such a request, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us
Unresolved · Procedure
Appeals process for denied requests
If a user's request is denied, they may have the right to appeal the denial according to the instructions provided at the time of denial.
Supporting quotations
If your request is denied you may have the right to appeal the denial in accordance with the instructions provided to you when the denial was made.
Qualifications & exceptions
If your request is denied you may have the right to appeal the denial in accordance with the instructions provided to you when the denial was made
Use & Processing · Company practice
Definition of tailored advertising
Tailored advertising involves using information about a user to personalize ads to be more relevant, also known as interest-based or targeted advertising. Some states may define this as 'sharing or selling' for cross-context behavioral advertising.
Supporting quotations
This is when we use information about you to personalize ads to be more relevant. This is also known as interest based advertising, targeted advertising, or what some states may define as, ‘sharing or selling’ for purposes of cross-context behavioural advertising.
purpose: advertising · purpose: personalization
Unresolved · User right or choice
Controls for tailored advertising
Users can control tailored advertising through the 'Tailored Ads' setting in their account, a 'Your Privacy Choices' link on the website footer (if not logged in), or for some podcasts, via a link in the episode's show description. Users can also use a recognized opt-out preference signal like Global Privacy Control (GPC).
Supporting quotations
You can control tailored advertising through the ‘Tailored Ads’ setting.
If you do not have an account or are not logged in, you can also opt-out by clicking the ['Your Privacy Choices'](https://www.spotify.com/us/legal/privacy-policy/#optanon-toggle-info-display) link at the footer of our website.
You can also control tailored advertising for some podcasts using the link in the episode’s show description.
You can also visit our services via a browser with a recognized opt-out preference signal enabled, such as the Global Privacy Control (GPC).
Qualifications & exceptions
for some podcasts using the link in the episode’s show description. This applies where the content provider inserts advertising into the podcast to fund it. The hosting provider, which might not be Spotify, manages these controls for the podcast
If you use a preference signal you may need to renew your preferences if you visit the Spotify Service with another device or browser, or if you clear your cookies
purpose: advertising
Use & Processing · Company practice
Advertising after opting out of tailored ads
If a user opts out of tailored advertising, they will still receive less relevant advertising, including on free and paid service options. This advertising will be based on their registration information and real-time usage of Spotify, such as what they are currently listening to.
Supporting quotations
If you are ‘opted out’ of tailored advertising, you will receive less relevant advertising, including on our free Service Option, as well as our paid Service Option, as applicable (for example, advertising in podcasts). This type of advertising is based on your registration information and information about your real-time usage of Spotify, such as what you are currently listening to on our services.
Qualifications & exceptions
including on our free Service Option, as well as our paid Service Option, as applicable (for example, advertising in podcasts)
data: content · purpose: advertising
Data Access & Collection · Company practice
Account Creation Data Collection
Spotify collects personal data necessary to create a user account and enable use of the Spotify Service. The specific data collected depends on the service option, account creation method, country, and whether third-party services are used for sign-in.
Supporting quotations
Personal data that we need to create your Spotify account and that enables you to use the Spotify Service.
The type of data collected and used depends on the type of Service Option you have. It also depends on how you create your account, the country you are in, and if you use third party services to sign in.
Spotify may request and process a user's street address for various reasons, including checking eligibility for service options, delivering legal notices, providing support, billing, tax administration, and delivering physical goods.
Supporting quotations
We may ask for and process your street address for the following reasons:
to check eligibility for a Service Option
to deliver notices which are required by law
to deliver support options
for billing and tax administration
to deliver physical goods or gifts which you have purchased or requested
Spotify collects personal data about how users access and use the Spotify Service, including information about their service option, actions within the service, browsing history, account settings, interactions with other users, prompts in AI features, transcripts, ad engagement, and use of third-party services/devices.
Supporting quotations
Personal data collected and processed about you when you’re accessing or using the Spotify Service.
your actions with the Spotify Service (including date and time), such as:
search queries
streaming history
playlists you create
your library
browsing history
account settings
interactions with other Spotify users
prompts in AI powered features
transcripts
engagement with ads
your use of third party services, devices and applications in connection with the Spotify Service
Spotify makes inferences about a user's age, interests, and preferences based on their usage of the Spotify Service.
Supporting quotations
inferences (i.e., our understanding) of your age, interests and preferences based on your usage of the Spotify Service
data: demographics · purpose: personalization
Data Access & Collection · Company practice
Content Provided by User
Spotify collects content provided by users when they participate in promotions (like contests) or post content to any part of the Spotify Service, including images, audio, text, titles, descriptions, and communications.
Supporting quotations
content you provide when participating in Spotify promotions, such as contests or sweepstakes
content you post to any part of the Spotify Service. For example: images, audio, text, titles, descriptions, communications, and other types of content
Spotify collects technical data including URL information, online identifiers (like cookie data and IP addresses), and information about the devices used, such as device IDs, network connection type, provider, performance, browser type, language, digital rights management information, operating system, and Spotify application version.
Supporting quotations
URL information
online identifiers such as cookie data and IP addresses
information about the devices you use such as:
device IDs
network connection type (e.g. wifi, 4G, LTE, Bluetooth)
Spotify collects information to discover and connect with third-party devices and applications, such as device name, identifiers, brand, and version. This includes devices on a user's Wi-Fi network (like speakers), devices made available by the operating system via Bluetooth/plugins, and Spotify partner applications.
Supporting quotations
information which enables us to discover and connect with third party devices and applications. Examples of this information are the device name, device identifiers, brand and version.
devices on your wifi network (such as speakers) which can connect to the Spotify Service
devices your operating system makes available when connecting via Bluetooth, plugin, and installation
Spotify partner applications to determine whether the application is installed on your device
data: device · purpose: service_operation
Use & Processing · Company practice
General Location Data Use
Spotify uses general location data to meet geographic requirements for content agreements and to deliver relevant content, advertising, and recommendations.
Supporting quotations
meet geographic requirements in our agreements with the owners of content on the Spotify Service
deliver content, advertising and recommendations that are relevant to you
Spotify collects motion-generated or orientation-generated device sensor data if required for specific features of the Spotify Service. This data indicates how a user moves or holds their device.
Supporting quotations
Motion-generated or orientation-generated device sensor data if needed to provide features of the Spotify Service that require this data. This is data which your device collects about the way you move or hold your device.
Qualifications & exceptions
if needed to provide features of the Spotify Service that require this data
data: device · purpose: service_operation
Data Access & Collection · Company practice
Voice Data Collection
If voice features are available and a user chooses to use them, Spotify collects and processes audio recordings of their voice.
Supporting quotations
If voice features are available in your market and you’ve chosen to use a voice feature, we collect and process voice data. Voice data means audio recordings of your voice.
Qualifications & exceptions
If voice features are available in your market
if you’ve chosen to use a voice feature
data: audio · purpose: service_operation
Data Access & Collection · Company practice
Message Data Collection
If messaging is available and a user chooses to use it, Spotify collects and processes text or other content sent directly to another user.
Supporting quotations
If messaging is available in your market and where you’ve chosen to use messaging, we collect and process message data. Message data means text or other content you send directly to another user.
Spotify collects Age Check Data when a user chooses to use an age-restricted feature or when a parent/guardian provides consent for a Managed Account. This can involve identity document verification (including a photo of the ID and potentially a photo of the face) or facial age estimation.
Supporting quotations
Age Check Data is the data you provide if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account (“Age Check”).
identity document verification: a photo of your identity document is used to confirm your age. In some cases, we may also use a photo of your face to verify that your ID belongs to you
facial age estimation: a photo of your face which is used to estimate your age
Qualifications & exceptions
if you (i) choose to use a feature that is subject to an Age Check or (ii) are a parent or legal guardian providing parental consent for a Managed Account
All Age Check Data collected by Spotify is deleted immediately after the age verification process is completed.
Supporting quotations
All Age Check Data is deleted immediately after the Age Check.
Data Access & Collection · Company practice
Payment and Purchase Data Collection
Spotify collects payment data when users make purchases or sign up for certain service options or trials. The specific data collected varies by payment method and includes name, date of birth, payment method type, card details (excluding full card number), ZIP/postal code, mobile phone number, and purchase/payment history.
Supporting quotations
If you make any purchases from Spotify or sign up for certain Service Options or a trial, we will need to process your payment data.
The exact personal data collected and used will vary depending on the payment method.
name
date of birth
payment method type (e.g. credit or debit card)
if using a debit or credit card, the card type, expiry date and certain digits of your card number. Note: For security, Spotify never stores your full card number
ZIP/postal code
mobile phone number
details of your purchase and payment history
Qualifications & exceptions
If you make any purchases from Spotify or sign up for certain Service Options or a trial
The exact payment methods supported are not listed.
Data Access & Collection · Company practice
Survey and Research Data Collection
When users respond to surveys or participate in user research, Spotify collects and uses the personal data provided, as described in the specific survey or research.
Supporting quotations
When you respond to a survey or take part in user research, we collect and use the personal data you provide as described in the survey or research.
Qualifications & exceptions
as described in the survey or research
data: content · purpose: research
Data Access & Collection · Company practice
Customer Service Data Collection
Spotify collects information related to user contacts with Customer Service, such as chat conversations and email correspondence.
Supporting quotations
Information about your contacts with our Customer Service, such as chat conversations and email correspondence.
data: messages · purpose: service_operation
Data Access & Collection · Company practice
Account creation via other services
If you use another service to register or log into Spotify, that service will send your information to Spotify to help create your account.
Supporting quotations
If you register for or log into the Spotify Service using another service, that service will send your information to us. This information helps create your account with us.
purpose: service_operation
Security & Safeguards · Company practice
Partners for user account protection
Spotify works with technical service partners to help protect user accounts.
Supporting quotations
We also work with technical service partners who help us protect user accounts.
purpose: security
Data Access & Collection · Company practice
Payment data from partners
If you choose to pay through third parties or by invoice, Spotify may receive data from its payment partners to send invoices, process payments, and deliver purchased items.
Supporting quotations
If you choose to pay through third parties or by invoice, we may get data from our payment partners.
send you invoices
process your payment
give you what you’ve purchased
Qualifications & exceptions
If you choose to pay through third parties or by invoice
data: payment · purpose: service_operation
Data Access & Collection · Company practice
Purchase data from merchants
If Spotify directs you to a merchant, it receives data related to your purchase from that merchant to calculate commissions, analyze partnership effectiveness, and understand your interests.
Supporting quotations
If we direct you to a merchant, we receive data from the merchant that is related to your purchase.
calculate any commissions owed to us
analyze the effectiveness of our partnership with these merchant partners
Spotify receives data, including device identifiers and hashed contact information, as well as inferences about your interests and preferences, from advertising and marketing partners to deliver relevant ads and marketing and measure their performance.
Supporting quotations
We receive data about you from certain advertising or marketing partners, including device identifiers such as hashed contact information. They also provide us with inferences, which are the partners’ understanding of your interests and preferences.
This allows us to deliver more relevant ads and marketing and measure their performance.
Spotify may receive data about you from companies it acquires to enhance its services, products, and offerings.
Supporting quotations
We may receive data about you from companies we acquire. This is to enhance our services, products, and offerings.
purpose: service_operation
Unresolved · Company practice
Data used to provide Spotify Service
Spotify uses various categories of personal data to provide its service, including setting up accounts, personalizing content recommendations, delivering the app, enabling content sharing, providing age-appropriate experiences, and offering optional features.
Supporting quotations
To provide the Spotify Service.
set up an account for you
personalize your account including your content recommendations
provide the Spotify app when you download it onto your device
enable you to share a link to Spotify content with someone else
provide an age-appropriate experience
provide various optional features of the Spotify Service
Spotify uses precise location data, when available and explicitly permitted by the user, to improve personalized recommendations for concerts and events, and to identify trending content in specific locations.
Supporting quotations
To improve our personalized recommendations and to improve the Spotify experience for all users, based on precise location data (where available and explicitly permitted by you).
For example, we can provide better personalized concert and event recommendations or let you know what is trending at your specific location. What we learn from your streaming at one location, could be used to suggest similar content to other users close to that location.
Precise Location Data
Qualifications & exceptions
where available and explicitly permitted by you
data: location · purpose: personalization
Unresolved · Company practice
Data used for troubleshooting
Spotify uses User Data, Usage Data, Voice Data, Message Data, and Customer Service Data to diagnose, troubleshoot, and fix issues with the Spotify Service.
Supporting quotations
To diagnose, troubleshoot, and fix issues with the Spotify Service.
Spotify uses User Data, Usage Data, Voice Data, Survey and Research Data, and Customer Service Data to evaluate and develop new features, technologies, and improvements to the Spotify Service, including training algorithmic and machine learning models for personalized recommendations, analyzing user reactions to features, building AI features like AI DJ and AI playlist, and enforcing user guidelines.
Supporting quotations
To evaluate and develop new features, technologies, and improvements to the Spotify Service. This includes development and training of algorithmic and machine learning models, which help us to keep our service safe and enhance our users’ experience.
to help us develop and improve our personalized recommendations
to help analyze how our users react to a particular new feature and see whether we should make any changes
so we can build AI features such as AI DJ and AI playlist
to help us enforce our [User Guidelines], [Platform Rules] and [Spotify for Creators Community Guidelines].
Spotify uses User Data, Usage Data, and Survey and Research Data for marketing and advertising purposes, including tailoring advertising to user interests and sending email marketing.
Supporting quotations
For marketing or advertising purposes.
when we use your personal data to tailor advertising to your interests
Fulfilling contractual obligations with third parties
Spotify uses personal data to meet its contractual obligations with third parties. This can include providing pseudonymized data about user listening habits to rightsholders.
Supporting quotations
To fulfill contractual obligations with third parties.
For example, when we provide pseudonymized data about our users’ listening because we have an agreement with a Spotify rightsholder to do so.
Pseudonymized data means that your data is identified by a code rather than your name or other directly identifying information.
Detecting and investigating inappropriate content or violations
Spotify uses various types of user data to detect, investigate, and take action on reports of inappropriate content or violations of its terms and policies.
Supporting quotations
To detect, investigate and take appropriate action on reports of possible inappropriate content or violation of our Terms of Use or other Spotify terms, policies, rules or guidelines.
Spotify uses aggregated user data, such as the number of new sign-ups in a country, for business planning, reporting, and forecasting to inform decisions like launching products in new locations.
Supporting quotations
To conduct business planning, reporting, and forecasting.
For example, when we look at aggregated user data like the number of new sign ups in a country in order to plan new locations to launch our products and features in.
Spotify uses personal data, including Usage Data, to keep its service secure and to detect and prevent fraud, such as analyzing usage patterns for fraudulent activity.
Supporting quotations
To keep the Spotify Service secure and to detect and prevent fraud.
For example, when we analyze Usage Data to check for fraudulent use of the Spotify Service.
Spotify uses personal data to conduct research and surveys, which may involve contacting users for feedback.
Supporting quotations
To conduct research and surveys.
For example, when we contact our users to ask for your feedback.
data: device · data: audio · purpose: research
Sharing & Disclosure · Company practice
Sharing data with connected third-party apps and devices
Spotify shares User Data and Usage Data with third-party applications, services, and devices (like social media, speakers, TVs, cars, and voice assistants) when you connect them to your Spotify account or use the Spotify Service with them.
Supporting quotations
Third party applications, services and devices you connect to your Spotify account
User Data
Usage Data
To connect your Spotify account, or so that you can use the Spotify Service in connection with third party applications, services or devices.
You can view and remove many third-party connections to your Spotify account through the 'Apps' section in your account settings.
Supporting quotations
You can see and remove many third party connections under ‘Apps’ in your account.
Sharing & Disclosure · Company practice
Public display of Support Community profile and posts
When you register for the Spotify Support Community, your chosen profile name and any questions or comments you post will be publicly displayed to all users of the community.
Supporting quotations
When you register for an account on the Spotify Support Community, we’ll ask you to create a profile name. This will be publicly displayed to anyone who uses the Spotify Support Community. We’ll also display any questions or comments you post.
Sharing User Data with artists and labels for marketing
Spotify may share your User Data with artists, record labels, or other partners so you can receive news or promotional offers from them. This sharing occurs if you choose to share your data for this purpose when signing up.
Supporting quotations
Artists and record labels
User Data
To receive news or promotional offers from artists, record labels or other partners.
You may choose to share your User Data for this purpose when you sign up to the Spotify Service.
Qualifications & exceptions
You may choose to share your User Data for this purpose when you sign up to the Spotify Service.
Withdrawing consent for marketing from artists/labels
You have the option to withdraw your consent at any time for sharing your User Data with artists, record labels, or other partners for marketing purposes.
Supporting quotations
You’ll always have the option to change your mind and withdraw your consent at any time
Spotify shares personal data with service providers who help them operate the Spotify service, provide customer support, secure systems, and market products.
Supporting quotations
So they can provide their services to Spotify.
Examples of such service providers include those we hire to:
give customer support
operate the technical infrastructure we need to provide the Spotify Service
assist in protecting and securing our systems and services (e.g. Google’s reCAPTCHA)
help market Spotify’s (and our partners’) products, services, events and promotions
verify your eligibility for certain types of Service Options (e.g., Spotify Premium Student)
Spotify states that it does not share personal data with advertising partners for users under the age of 18.
Supporting quotations
We do not disclose personal data to advertising partners for users under the age of 18.
Qualifications & exceptions
under the age of 18
purpose: advertising
Sharing & Disclosure · Company practice
Marketing Partners Combine Data for Offers
Spotify's marketing partners may combine data received from Spotify with other data they collect about users to present relevant offers and promotions.
Supporting quotations
Our partners may also combine the personal data we disclose to them with other data they collect about you, e.g. your use of their services. We and our partners may use this information to present you with offers, promotions, or other marketing that we think you’ll find relevant.
purpose: marketing · purpose: personalization
Sharing & Disclosure · Restriction or exception
No Marketing Sharing for Under 18s by Default
Spotify states that it does not disclose personal data to marketing partners by default for users under the age of 18.
Supporting quotations
With respect to Spotify Service users under the age of 18, we do not disclose personal data to marketing partners by default.
Qualifications & exceptions
under the age of 18
by default
purpose: marketing
Sharing & Disclosure · Company practice
Sharing with Ticketing and Event Partners
Spotify shares User Data, including name, email, or other order details, with event partners like ticketing agents or venue box offices for events where tickets are sold through Spotify's platform.
Supporting quotations
Ticketing and event partners
User Data
For every event for which we sell tickets, we will need to disclose your name, email or other order details to our event partners such as ticketing agent or venue box office where the event is taking place so that you can check-in as a verifiable guest who purchased tickets through Spotify’s ticketing platform.
Qualifications & exceptions
For every event for which we sell tickets
so that you can check-in as a verifiable guest who purchased tickets through Spotify’s ticketing platform
data: identifiers · purpose: service_operation
Sharing & Disclosure · Company practice
Sharing with Podcast Hosting Platforms
Spotify discloses Usage Data, such as IP address, to podcast hosting platforms when a user plays a podcast, including those hosted by third parties not owned by Spotify.
Supporting quotations
Podcast Hosting Platforms
Usage Data
Hosting platforms host podcasts so that they can deliver them to you. We disclose certain data, such as your IP address, to the podcast hosting platforms when you play a podcast. We also allow you to stream podcasts available from other hosting platforms not owned by Spotify.
Qualifications & exceptions
when you play a podcast
data: identifiers · purpose: service_operation
Linking & Identification · Context
Podcast Hosting Platform Privacy Policies
Spotify advises users to check the privacy policies of podcast hosting platforms for information on how they use data disclosed to them.
Supporting quotations
Podcast providers should explain in the show or episode description which platform is hosting the podcast. See the hosting platform’s own privacy policy for how they use data disclosed to them.
Sharing & Disclosure · Company practice
Sharing with Spotify Group Companies
Spotify shares various types of personal data, including User Data, Street Address Data, Usage Data, Voice Data, Message Data, Payment and Purchase Data, and Survey and Research Data, with other Spotify group companies and acquired companies.
Supporting quotations
Other Spotify group companies, including companies that Spotify acquires
User Data
Street Address Data
Usage Data
Voice Data
Message Data
Payment and Purchase Data
Survey and Research Data
To carry out our daily business operations and so we can maintain, improve and provide the Spotify Service and acquired companies’ services to you.
The company shares data with employees across its group companies to help them develop and improve features for the Spotify Service.
Supporting quotations
enabling our employees who work for different group companies to develop and improve features for the Spotify Service
purpose: service_operation
Sharing & Disclosure · Company practice
Sharing with Measurement Companies for Ad Effectiveness
The company shares data with measurement companies to assess how effective advertising campaigns are on the Spotify Service.
Supporting quotations
disclosing data to our measurement companies to measure the effectiveness of ad campaigns that run on the Spotify Service
purpose: advertising
Sharing & Disclosure · Company practice
Sharing with Podcast Companies for User Trends
The company shares data with its podcast companies to gain a better understanding of user listening trends.
Supporting quotations
disclosing data to our podcast companies to better understand user listening trends
purpose: analytics
Sharing & Disclosure · Company practice
Sharing with Courts and Authorities
The company may process and share personal data to comply with requests from courts, authorities, parties to litigation, or other authorized third parties when it believes it is necessary.
Supporting quotations
Courts and Authorities: We may process and share your personal data to comply with a request from courts, authorities, parties to litigation, or other authorized third parties. We will do so when we believe in good faith it is necessary, including:
Qualifications & exceptions
when we believe in good faith it is necessary
purpose: legal_compliance
Sharing & Disclosure · Company practice
Sharing for Legal Obligations
The company may share personal data to comply with a legal obligation.
Supporting quotations
to comply with a legal obligation
purpose: legal_compliance
Sharing & Disclosure · Company practice
Sharing for Legal Process Response
The company may share personal data to respond to a valid legal process, such as a search warrant, court order, or subpoena.
Supporting quotations
to respond to a valid legal process (such as a search warrant, court order, or subpoena)
Qualifications & exceptions
valid legal process
purpose: legal_compliance
Sharing & Disclosure · Company practice
Sharing for Justifiable Interests
The company may share personal data for its own or a third party's justifiable interest, including criminal investigations, litigation, protecting someone’s safety, or preventing death or imminent bodily harm.
Supporting quotations
for our own or a third party's justifiable interest such as criminal investigations, litigation, protecting someone’s safety, or preventing death or imminent bodily harm
purpose: security · purpose: legal_compliance
Sharing & Disclosure · Context
Data Categories Depend on Request
The types of personal data processed or shared will vary depending on the nature of the specific request.
Supporting quotations
The categories of personal data processed or shared will depend on the nature of the specific request.
Retention & Deletion · Company practice
Data Retention Period
The company retains personal data only for as long as necessary to provide the Spotify Service and for its legitimate and essential business purposes.
Supporting quotations
We keep your personal data only as long as necessary to provide you with the Spotify Service and for Spotify’s legitimate and essential business purposes, such as:
narrows (model-proposed): Data Retention Period — User deletion of profile data can shorten the data retention period
Retention & Deletion · Company practice
Retention of User-Managed Data
For personal data that users can see and update themselves, the company keeps the information for as long as the user chooses, unless specific limited purposes apply.
Supporting quotations
Where users are able to see and update the personal data themselves, we keep the information for as long as the user chooses unless one of the limited purposes described below applies.
Qualifications & exceptions
unless one of the limited purposes described below applies
The company has set specific retention periods for some data, causing it to expire after a certain time, such as search query data being deleted after 90 days.
Supporting quotations
Subject to other applicable retention rules listed in this Section 6, we have set certain retention periods so that data expires after a specific period of time. For example, personal data you may input as part of search queries is deleted after 90 days.
Qualifications & exceptions
Subject to other applicable retention rules listed in this Section 6
data: browsing
Retention & Deletion · Company practice
Data retained until account deletion
Spotify keeps certain data, such as your username, profile information, and streaming history, until your account is deleted. This data is used for features like retrospective playlists and personalized recommendations.
Supporting quotations
We keep some data until your Spotify account is deleted. Examples of this include your Spotify username and profile information. We also keep streaming history for the life of an account, for example, to provide retrospective playlists that users enjoy and personalized recommendations that take listening habits into account (for example, Your Time Capsule or Your Summer Rewind). When your Spotify account is deleted, this category of data is deleted or de-identified.
Due to its global operations, Spotify transfers personal data internationally to its group companies, subcontractors, and partners for the activities described in the policy.
Supporting quotations
Because of the global nature of our business, Spotify transfers personal data internationally with Spotify group companies, subcontractors and partners when carrying out the activities described in this Policy.
purpose: service_operation
Security & Safeguards · Company commitment
Measures for international data transfer compliance
Spotify uses tools and additional protections, such as encryption, pseudonymization, and policies to challenge government requests, to ensure international personal data transfers comply with applicable law.
Supporting quotations
Whenever we transfer personal data internationally, we use tools to make sure the data transfer complies with applicable law.
We also identify and use additional protections as appropriate for each data transfer. For example, we use:
technical protections, such as encryption and pseudonymization
policies and processes to challenge disproportionate or unlawful government authority requests
purpose: security · purpose: legal_compliance
Cross-references
supports (model-proposed): International data transfers — Measures for international data transfer compliance support international data transfers
Security & Safeguards · Company commitment
Commitment to data security
Spotify is committed to protecting user personal data and implements appropriate technical and organizational measures, including pseudonymization, encryption, access, and retention policies, to help secure it.
Supporting quotations
We’re committed to protecting our users’ personal data. We put in place appropriate technical and organizational measures to help protect the security of your personal data. However, be aware that no system is ever completely secure.
We have put various safeguards in place to guard against unauthorized access and unnecessary retention of personal data in our systems. These include pseudonymization, encryption, access, and retention policies.
Qualifications & exceptions
no system is ever completely secure
purpose: security
Account & Service Control · User right or choice
Sign out everywhere function
Users can log out of Spotify on all devices simultaneously using the 'Sign out everywhere' function available on their account page.
Supporting quotations
You can log out of Spotify in multiple places at once by using the ‘Sign out everywhere’ function on [your account page](http://www.spotify.com/account).
purpose: security
Cross-references
related (model-proposed): Shared account access implications — The 'sign out everywhere' function is related to implications of shared account access
Account & Service Control · Context
Shared account access implications
If others access your Spotify account, they can access your personal data, controls, and the Spotify Service, which may affect your personalized recommendations. It is the user's responsibility to decide if they are comfortable sharing their personal data this way.
Supporting quotations
If other individuals have access to your Spotify account, then they can access personal data, controls and the Spotify Service available in your account. For example, someone might use your account on a shared device.
It’s your responsibility to only allow this to happen if you’re comfortable sharing your personal data with them. Anyone else’s use of your Spotify account may impact your personalized recommendations.
purpose: personalization
Data Access & Collection · Company commitment
No knowing collection of children's data
Spotify states it does not knowingly collect or use personal data from children under the applicable Age Limit, outside of Managed Accounts or Spotify Kids. If such data is discovered, Spotify will take reasonable steps to delete it, which may include deleting the child's account.
Supporting quotations
We do not knowingly collect or use personal data from children under the applicable Age Limit outside of Managed Accounts or Spotify Kids. If you are a parent or guardian and become aware that your child, who is under the application Age Limit, has provided personal data to Spotify in any other context, contact us. If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
Qualifications & exceptions
outside of Managed Accounts or Spotify Kids
If we learn that we’ve collected the personal data of a child under the applicable Age Limit, we’ll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
data: demographics · purpose: legal_compliance
Cross-references
narrows (model-proposed): Account Creation Data Collection — No knowing collection of children's data restricts account creation data collection
Sharing & Disclosure · Context
Third-party links and data collection
The Spotify Service may contain links to third-party websites, plug-ins, and applications. Clicking these links may allow third parties to collect or share data about you, and Spotify is not responsible for their privacy practices.
Supporting quotations
The Spotify Service may include links to third-party websites, plug-ins and applications. Clicking on such links may allow third parties to collect or share data about you. Spotify does not control these third-party websites and is not responsible for their privacy practices.
purpose: third_party_services
Legal Rights & Agreement Rules · Company practice
Policy Changes
The company may change this policy and will provide prominent notice for material changes, such as displaying a notice within the service or sending an email or device notification.
Supporting quotations
We may occasionally make changes to this Policy.
When we make material changes to this Policy, we’ll provide you with prominent notice as appropriate under the circumstances. For example, we may display a prominent notice within the Spotify Service or send you an email or device notification.
Qualifications & exceptions
may occasionally
When we make material changes
Legal Rights & Agreement Rules · Procedure
Contact Information for Privacy Concerns
Users can contact the Data Protection Officer via email or postal mail for questions or concerns about the policy.
Supporting quotations
For any questions or concerns about this Policy, contact our Data Protection Officer any one of these ways:
Email us at privacy@spotify.com
write to us at: Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA, Attn: Data Protection Officer