Spotify collects detailed records of everything you do on the service, including what you search for, listen to, and interact with, as well as inferences about your age, interests, and preferences derived from that activity.
This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The breadth of Usage Data collected, including behavioral inferences, feeds both personalization and advertising functions and represents the primary data set shared with third-party advertising and analytics partners, making it the most operationally significant category in the policy.
Spotify collects search queries, streaming history, browsing history, ad engagement, device identifiers, IP addresses, and behavioral inferences about your interests and preferences; this data is used for service personalization, content recommendations, and tailored advertising, and may be shared with advertising, analytics, and technical service partners.
How other platforms handle this
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"Personal data collected and processed about you when you're accessing or using the Spotify Service. This includes information such as: your actions with the Spotify Service (including date and time), such as: search queries; streaming history; playlists you create; your library; browsing history; account settings; interactions with other Spotify users; prompts in AI powered features; transcripts; engagement with ads; your use of third party services, devices and applications in connection with the Spotify Service; inferences (i.e., our understanding) of your age, interests and preferences based on your usage of the Spotify Service.Excerpt from Spotify's Privacy Policy
REGULATORY LANDSCAPE: The collection of inferences about interests, preferences, and age from usage behavior engages CCPA/CPRA, which treats inferences drawn to create consumer profiles as personal information subject to disclosure, access, and deletion rights.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The breadth of Usage Data collected, including behavioral inferences, feeds both personalization and advertising functions and represents the primary data set shared with third-party advertising and analytics partners, making it the most operationally significant category in the policy.
Spotify collects search queries, streaming history, browsing history, ad engagement, device identifiers, IP addresses, and behavioral inferences about your interests and preferences; this data is used for service personalization, content recommendations, and tailored advertising, and may be shared with advertising, analytics, and technical service partners.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.