Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Spotify's Privacy Policy explains what personal data Spotify collects about you—including from outside advertising partners—how it is used to tailor ads, and what rights you have over it. Spotify collects identity document photos and sometimes facial images to verify age, but deletes that data immediately after the check. You can request a copy of your personal data or ask for certain data to be deleted using the 'Download your data' tool on your Account Privacy page or by contacting Spotify directly.
Spotify's Privacy Policy establishes the scope of personal data Spotify collects—including identity documents and facial images for age verification, which are deleted immediately after the check is completed—and the conditions under which that data is shared with advertising and marketing partners who may further combine it with independently collected data. The policy recognizes users' rights to access, copy, and request deletion of certain personal data (subject to necessity exceptions), as well as the right not to be subject to solely automated decisions producing legal or similarly significant effects. Tailored advertising is disabled by default for younger users and for users under 18 whose data is not disclosed to marketing partners by default; advertising activation occurs automatically upon reaching the applicable age threshold. Spotify commits that exercising any privacy right will not result in discriminatory treatment.
This policy means Spotify builds a profile of you using not only data you provide directly but also device identifiers, hashed contact information, and inferences received from external advertising partners—data flows you may not have initiated. Your personal data shared with marketing partners can be combined with data those partners hold independently to target you with offers and promotions. Spotify collects sensitive biometric and identity document data for age verification but deletes it immediately after the check. You have the right to access your personal data and to request deletion of certain data, and Spotify has committed that exercising those rights will not result in worse treatment. You can act on your data access right now by using the 'Download your data' tool on Spotify's Account Privacy page.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Spotify has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Advertising Partner Data Used for Ad Relevance and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.