Strictly necessary cookies and first-party functional cookies are designated as always active and cannot be disabled through the consent interface; the document states that blocking these cookies via browser settings may result in parts of the service not functioning.
This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The designation of functional cookies as 'always active' alongside strictly necessary cookies may require evaluation under GDPR and ePrivacy Directive guidance, which generally permits exemption from consent only for cookies that are strictly necessary for a service explicitly requested by the user. Whether personalization-enabling functional cookies qualify for this exemption is a matter of regulatory interpretation.
Interpretive note: Whether functional personalization cookies qualify for the strictly necessary exemption under ePrivacy Directive and GDPR guidance is subject to regulatory interpretation and may vary across EU/EEA jurisdictions.
Under these terms, strictly necessary and first-party functional cookies cannot be disabled through the Spotify consent interface. Users who wish to block these cookies must do so through browser-level settings, with the document stating that some parts of the service may not function as a result.
Cross-platform context
See how other platforms handle Strictly Necessary and Functional Cookies: Always Active and similar clauses.
Compare across platforms →"These cookies are necessary for the service to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the service will not then work. First Party Functional Cookies Always Active. These cookies enable us to provide enhanced functionality and personalisation. If you do not allow these cookies then some or all of these services may not function properly.Excerpt from Spotify's Platform Rules
1) REGULATORY LANDSCAPE: This provision engages ePrivacy Directive Article 5(3) exemptions for strictly necessary cookies, and GDPR consent requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The designation of functional cookies as 'always active' alongside strictly necessary cookies may require evaluation under GDPR and ePrivacy Directive guidance, which generally permits exemption from consent only for cookies that are strictly necessary for a service explicitly requested by the user. Whether personalization-enabling functional cookies qualify for this exemption is a matter of regulatory interpretation.
Under these terms, strictly necessary and first-party functional cookies cannot be disabled through the Spotify consent interface. Users who wish to block these cookies must do so through browser-level settings, with the document stating that some parts of the service may not function as a result.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.