Privacy Policy

PlaylistSafe is operated by María José Noguera Zafra, based in Spain, who is the data controller for the personal data described on this page. For any privacy question — access, correction, deletion, portability — write to privacy@playlistsafe.com.

• Account: your Spotify user id, display name and the email address of your Spotify account, captured when you log in (or the one you give at checkout, if we learned that first). The email is used only for service messages: your Premium welcome, "your backups stopped", and a warning before an inactive account is deleted. No newsletters, no marketing.
• Language: the language you use the site in, and the first language your browser reports (for example "pt-BR"), so those service messages and the checkout page reach you in a language you read. A small cookie named lang remembers the language you picked; it is set only when you choose a language or log in, holds nothing but the language code, and lasts a year.
• How you found us: when your account is created, the campaign tags of the link you arrived with (its utm_ parameters), the website that sent you (its domain only, for example google.com) and the first page you saw on that visit. Until you log in this stays in your browser tab; nothing is kept for visitors who never create an account. Deleted with your account.
• Usage: the days you open your dashboard, and when you open the Premium offer or start a checkout (with the plan you picked), linked to your account, so we can see what helps people keep their library safe and what doesn't. Kept for 13 months, then deleted automatically, and deleted with your account.
• Spotify connection: an OAuth refresh token that lets us back up your library on a schedule without you present. It is encrypted at rest (AES-256-GCM) with a key held only on the server; it is never sent to your browser.
• Library snapshots: for each backed-up playlist (and, on the paid plan, your liked songs): playlist name and description, a cover-image URL, and the ordered track list (track URI, when it was added, track title and artist names). We do not store audio, album artwork files, or your listening history.
• Error reports: when something fails, the page or feature involved, the error message, your browser and — if you were logged in — your Spotify user id, so we can find and fix the problem. Kept for 90 days, then deleted automatically.
• Messages you send us: what you write in the contact form, the email you leave (if any), and, if you tick the box, your browser and the page you were on. Kept until handled, and deleted with your account.
• Billing: if you subscribe, your Stripe customer id and subscription status. Card details and the billing address Stripe asks for to work out VAT live with Stripe, never with us.

• Backup history is kept for 7 days on the free plan and 30 days on the paid plan; a daily job deletes anything older. We always keep your most recent successful (or partly successful) backup, including the last good copy of every playlist it covers, so canceling doesn't silently leave you with nothing.
• When a playlist disappears from your Spotify library, we keep its last snapshot for 90 days after we last saw it, so you can restore it.
• Free accounts with no login and no manual backup for 12 months are deleted (snapshots, Spotify connection, personal details). If we have your email address we warn you 30 days before; logging in cancels it. Accounts with a subscription are never deleted for inactivity.
• If you cancel a subscription, existing snapshots shrink to the free retention window; they are never deleted eagerly on cancellation day.
• Subscription records needed for tax and accounting purposes are kept as long as the relevant tax authority requires.

Settings → "Delete account & data" removes every snapshot, the encrypted Spotify connection, and your personal details immediately, and cancels any subscription. You can also revoke this app's access at any time on your Spotify account's Apps page; backups stop at the next attempt and, if you subscribe, you'll be notified once by email.

• Spotify — source of your library data via the Spotify Web API.
• Stripe — payment processing for subscriptions. We tell it your language so its checkout page and receipts match.
• Hetzner — hosts the server and database, in Germany.
• Cloudflare — delivers the site and protects it from abuse, and counts page views with its cookieless Web Analytics (no cookies, no cross-site tracking, no personal profile).
• Resend — sends the rare transactional email (e.g. "your backups stopped").

No advertising, no cross-site tracking, nothing is sold or shared for marketing.

If you're in the EU/EEA, UK, or another jurisdiction with similar rules, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive your data in a portable format (the JSON download on every snapshot is exactly that). Email us and we'll respond. You also have the right to lodge a complaint with your local data protection authority.

We'll update the date at the top of this page when material changes happen. The current version is dated 2026-11-02.