Privacy
Privacy policy
This is a demo MVP. The principles below describe how the product is architected to behave. They are not a substitute for a lawyer-reviewed policy in production.
What we store
Only what the product needs to work: the artists you choose or import, your content and concert preferences, your email address, and a record of your consent. We do not store raw Spotify listening history, only the derived list of artists you follow, your top artists, and artists behind your saved tracks.
Spotify access
By default we request read-only scopes: user-follow-read, user-top-read and user-library-read. We never request your email from Spotify and never use Spotify's own recommendation engine. If you separately choose to create a Release Radar playlist in Settings, that one optional feature additionally requests playlist-modify-private, which only creates and adds tracks to that single private playlist, nothing else in your account.
Consent
Newsletter consent is recorded as an explicit, timestamped, opt-in event, never pre-checked. Withdrawing consent (unsubscribing) is recorded the same way, and both are kept as a permanent, append-only history.
Your controls
You can disconnect Spotify, delete the artist data imported from Spotify, pause or unsubscribe from the newsletter, and permanently delete your account and all associated data, all from Settings.