This provision authorizes Spotify to collect personal data associated with a user's browser or device and share it with third-party marketing partners for targeted advertising purposes, including sharing cookie data to deliver promotional messages on partner platforms.
This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal basis and operational scope for Spotify's cross-platform advertising data sharing, authorizing disclosure of browser- and device-associated personal data to third-party partners. Compliance teams should evaluate this disclosure against GDPR legitimate interests or consent requirements and CPRA definitions of 'sharing' personal information for cross-context behavioral advertising.
Under this provision, Spotify may share cookie data and device-associated personal data with marketing partners who may use it to deliver targeted advertisements on their own platforms. The provision applies to users browsing Spotify's web properties regardless of account login status.
Cross-platform context
See how other platforms handle Tailored Advertising Data Sharing with Third-Party Partners and similar clauses.
Compare across platforms →"Spotify may collect and share some of your personal data associated with this browser or device with some of our partners for certain purposes such as targeted advertising on their platforms. For example, we may share your cookie data with a marketing partner to inform you of one of our latest promotions while you are on their platform.Excerpt from Spotify's Platform Rules
1) REGULATORY LANDSCAPE: This provision engages GDPR requirements regarding consent for sharing personal data with third-party controllers, the ePrivacy Directive regarding cookie-based data collection, and CPRA provisions on sharing personal information for cross-context behavioral advertising.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the legal basis and operational scope for Spotify's cross-platform advertising data sharing, authorizing disclosure of browser- and device-associated personal data to third-party partners. Compliance teams should evaluate this disclosure against GDPR legitimate interests or consent requirements and CPRA definitions of 'sharing' personal information for cross-context behavioral advertising.
Under this provision, Spotify may share cookie data and device-associated personal data with marketing partners who may use it to deliver targeted advertisements on their own platforms. The provision applies to users browsing Spotify's web properties regardless of account login status.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.