Spotify · Spotify Privacy Policy

Behavioral Inference of Age, Interests, and Preferences

Medium severity
Share 𝕏 Share in Share 🔒 PDF
Watch Spotify Get alerts when this provision or policy changes.
Watch — $9.99/mo

Why it matters (compliance & risk perspective)

Inferences about sensitive characteristics like age can be used to target advertising and make service decisions; under CPRA, inferences derived from personal data are themselves personal information subject to access and deletion rights, and consumers may not realize a behavioral profile is being built.

Consumer impact (what this means for users)

Spotify collects a wide range of personal data including your listening history, search queries, inferences about your interests and age, voice recordings, and — for age verification — photos of your face and identity documents. Targeted advertising using your data and data from third-party advertising partners is enabled by default for eligible users, meaning your listening behavior and demographic information are used to serve you personalized ads unless you actively opt out. You can opt out of tailored advertising by visiting spotify.com/account/privacy and toggling off 'Tailored Ads', or by clicking 'Your Privacy Choices' at the bottom of Spotify's website.

How other platforms handle this

Riot Games Medium

Internet or other electronic network activity info, including the use of the Riot Services (timestamps, clicks, scrolling, browsing times, browsing heatmaps, searches, referral/exit pages, and activity and interactions on our websites and in our game clients, including chat logs), computer or device...

Twilio Medium

You grant Twilio and its Affiliates the right to process Customer Data as necessary to provide the Services in a manner that is consistent with this Agreement and the Twilio Data Protection Addendum. You are responsible for the quality and integrity of Customer Data.

Square Medium

You grant us and our subsidiaries, affiliates, successors, and as authorized by Square in our sole discretion, third parties, a worldwide, non-exclusive, royalty-free, fully-paid, transferable, irrevocable, perpetual, and sub-licensable right to use, reproduce, modify, adapt, publish, prepare deriva...

See all platforms with this clause type →

This clause could change without notice.

Get alerted when Spotify updates this policy — with plain-language summaries and severity ratings.

Watch Spotify Need compliance memos? Professional →
View original clause language
inferences (i.e., our understanding) of your age, interests and preferences based on your usage of the Spotify Service

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Spotify Privacy Policy
Entity
Spotify
Document last updated
April 29, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 9, 2026
Record ID
CA-P-002177
Document ID
CA-D-00036
Evidence Provenance
Source URL
Wayback Machine
SHA-256
20e7378325f90f73de8e5f0d9b2d1ec4523f9cf07b406b492edd5753b96f24ad
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Spotify | Document: Spotify Privacy Policy | Record: CA-P-002177
Captured: 2026-03-06 20:27:52 UTC | SHA-256: 20e7378325f90f73…
URL: https://conductatlas.com/platform/spotify/spotify-privacy-policy/behavioral-inference-of-age-interests-and-preferences/
Accessed: May 4, 2026
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Don't miss changes to this clause.

Spotify has updated this policy before. Get alerted on the next change.

Watch Spotify

Frequently Asked Questions

What does Spotify's Behavioral Inference of Age, Interests, and Preferences clause do?

Inferences about sensitive characteristics like age can be used to target advertising and make service decisions; under CPRA, inferences derived from personal data are themselves personal information subject to access and deletion rights, and consumers may not realize a behavioral profile is being built.

Is ConductAtlas affiliated with Spotify?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.