Privacy Policy

What we store

Your Spotify user id, display name, email address, avatar URL, country and subscription type, as returned by Spotify when you sign in.

Your settings: title format, cover style, playlist visibility, number of tracks, the repeat filter, and whether monthly generation is enabled.

A record of every playlist created for you — its Spotify id, name, month and the list of tracks that went into it — and the outcome of each generation run.

Spotify access and refresh tokens. These are encrypted with AES-256-GCM before they are written to the database.

Why we store it

The refresh token is the only way to create a playlist on the first of the month without you being present. The track list exists so that the optional “skip repeats” setting can work and so the dashboard can show what each month contained. Everything else exists to render your dashboard and name your playlists correctly.

What we do not do

No analytics, no tracking pixels, no advertising, no profiling and no third-party data sharing. Your data is not sold, rented or transferred to anyone.

We do not read your saved library, your followed artists or your listening history beyond the top-tracks endpoint used to build the playlist.

Spotify permissions we request

user-read-email and user-read-private to identify your account; user-top-read to fetch your most played tracks; playlist-modify-public and playlist-modify-private to create the playlist; ugc-image-upload to set its cover.

Deleting your data

The dashboard has a delete button. It removes your user record, your encrypted tokens, your playlist history and your run history from the database immediately and permanently. Playlists already in your Spotify account are untouched — they belong to you.

You can additionally revoke this app's access from your Spotify account's Apps page at any time.

Where it runs

The application and its PostgreSQL database run on a server operated by the person who runs this instance, with nightly encrypted backups. There is no other processor involved beyond Spotify's own API.