Privacy Policy

PlaylistSafe is run by José M. Pérez as an individual. For any privacy question — access, correction, deletion, portability — write to [email protected].

• Account: your Spotify user id and display name, captured when you log in. If you subscribe, also the email address you give at checkout — used only for service messages such as "your backups stopped".
• Spotify connection: an OAuth refresh token that lets us back up your library on a schedule without you present. It is encrypted at rest (AES-256-GCM) with a key held only on the server; it is never sent to your browser.
• Library snapshots: for each backed-up playlist (and, on the paid plan, your liked songs): playlist name and description, a cover-image URL, and the ordered track list (track URI, when it was added, track title and artist names). We do not store audio, album artwork files, or your listening history.
• Error reports: when something fails, the page or feature involved, the error message, your browser and — if you were logged in — your Spotify user id, so we can find and fix the problem. Kept for 90 days, then deleted automatically.
• Messages you send us: what you write in the contact form, the email you leave (if any), and, if you tick the box, your browser and the page you were on. Kept until handled, and deleted with your account.
• Billing: if you subscribe, your Stripe customer id and subscription status. Card details live with Stripe, never with us.

• Backup history is kept for 7 days on the free plan and 30 days on the paid plan; a daily job deletes anything older. We always keep your most recent successful (or partly successful) backup, including the last good copy of every playlist it covers, so canceling doesn't silently leave you with nothing.
• When a playlist disappears from your Spotify library, we keep its last snapshot for 90 days after we last saw it, so you can restore it.
• Free accounts with no login and no manual backup for 12 months are deleted (snapshots, Spotify connection, personal details). If we have your email address we warn you 30 days before; logging in cancels it. Accounts with a subscription are never deleted for inactivity.
• If you cancel a subscription, existing snapshots shrink to the free retention window; they are never deleted eagerly on cancellation day.
• Subscription records needed for tax and accounting purposes are kept as long as the relevant tax authority requires.

Settings → "Delete account & data" removes every snapshot, the encrypted Spotify connection, and your personal details immediately, and cancels any subscription. You can also revoke this app's access at any time on your Spotify account's Apps page; backups stop at the next attempt and, if you subscribe, you'll be notified once by email.

• Spotify — source of your library data via the Spotify Web API.
• Stripe — payment processing for subscriptions.
• Resend — sends the rare transactional email (e.g. "your backups stopped").

No advertising, no cross-site tracking, nothing is sold or shared for marketing.

If you're in the EU/EEA, UK, or another jurisdiction with similar rules, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive your data in a portable format (the JSON download on every snapshot is exactly that). Email us and we'll respond. You also have the right to lodge a complaint with your local data protection authority.

We'll update the date at the top of this page when material changes happen. The current version is dated 2026-09-26.