Provision record
Spotify · Spotify Platform Rules · View original document ↗

Content Selection, Delivery, and Reporting Cookies: Cross-Site Browser Tracking

High severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Spotify and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Content selection, delivery, and reporting cookies are set by third-party social media services integrated into Spotify's site and are capable of tracking browser activity across other websites and building interest profiles that may influence content and messaging on those third-party sites.

This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision discloses that third-party social media cookies embedded in Spotify's web properties are capable of cross-site browser tracking and interest profiling, with downstream effects on content displayed on non-Spotify websites. This type of third-party cookie activity is among the most scrutinized practices under GDPR and ePrivacy Directive enforcement.

Clause Stability Stable

0
Changes
6
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under this provision, allowing content selection and delivery cookies permits third-party social media services to track browsing activity across websites and build interest profiles that may affect content displayed on other platforms. Users who disable these cookies may be unable to access social sharing tools on Spotify's site.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Toggle off 'Content Selection, Delivery, and Reporting' cookies in the Spotify consent interface and confirm your choices to prevent third-party social media services from tracking your browser across other websites.

Cross-platform context

See how other platforms handle Content Selection, Delivery, and Reporting Cookies: Cross-Site Browser Tracking and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

Excerpt from Spotify's Platform Rules

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision engages GDPR requirements for lawful processing and transparency regarding third-party data controllers embedded in a site, the ePrivacy Directive's consent requirements for third-party cookies capable of cross-site tracking, and CPRA …

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Spotify Platform Rules
Entity
Spotify
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
July 9, 2026
Record ID
CA-P-016293
Document ID
CA-D-00037
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
5587b8143de1ac408c3820b663d53fe08a9cf3b4a16bf8d9900ea12b4954a66d
Analysis generated
May 8, 2026 00:16 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Spotify
Document: Spotify Platform Rules
Record ID: CA-P-016293
Captured: 2026-05-08 00:16:42 UTC
SHA-256: 5587b8143de1ac40…
URL: https://conductatlas.com/platform/spotify/spotify-platform-rules/provision/CA-P-016293/content-selection-delivery-and-reporting-cookies-cross-site-browser-tracking/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Spotify's Content Selection, Delivery, and Reporting Cookies: Cross-Site Browser Tracking clause do?

This provision discloses that third-party social media cookies embedded in Spotify's web properties are capable of cross-site browser tracking and interest profiling, with downstream effects on content displayed on non-Spotify websites. This type of third-party cookie activity is among the most scrutinized practices under GDPR and ePrivacy Directive enforcement.

How does this clause affect you?

Under this provision, allowing content selection and delivery cookies permits third-party social media services to track browsing activity across websites and build interest profiles that may affect content displayed on other platforms. Users who disable these cookies may be unable to access social sharing tools on Spotify's site.

Is ConductAtlas affiliated with Spotify?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.