Spotify · Spotify Privacy Policy

Inferences About User Interests, Age, and Preferences

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

Spotify creates a profile of inferences about you — including your estimated age, personal interests, and preferences — based on how you use the service, even if you never directly provided this information.

Consumer impact (what this means for users)

Spotify builds an inferred profile about you — including assumptions about your age and interests — from your listening and app behavior, and this profile informs the targeted advertising you receive and may be shared with advertising partners.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Use the 'Download your data' tool at spotify.com/account/privacy to request your personal data and review what inferences Spotify has built about your age, interests, and preferences.

Cross-platform context

See how other platforms handle Inferences About User Interests, Age, and Preferences and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Derived inferences about your age, interests, and preferences constitute personal data that can be used for targeted advertising and shared with third parties, and under several state privacy laws, consumers have the right to know about and in some cases correct these inferences.

View original clause language
inferences (i.e., our understanding) of your age, interests and preferences based on your usage of the Spotify Service.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: Derived inferences constitute 'personal information' under CPRA (Cal. Civ. Code §1798.140(v)) and must be disclosed in response to access requests. CPRA also provides a right to correct inaccurate personal information including inferences. Virginia VCDPA §59.1-575 and Colorado CPA similarly define inferences as personal data. FTC Act Section 5 applies to deceptive profiling practices. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority over deceptive profiling and inference-based advertising practices, particularly where inferences about sensitive characteristics are used.
    File a complaint →
  • State AG
    State AGs in California, Virginia, and Colorado enforce consumer rights over inferred personal data including rights of access and correction.
    File a complaint →

Provision details

Document information
Document
Spotify Privacy Policy
Entity
Spotify
Document last updated
April 29, 2026
Tracking information
First tracked
April 28, 2026
Last verified
April 28, 2026
Record ID
CA-P-003898
Document ID
CA-D-00036
Evidence Provenance
Source URL
Wayback Machine
SHA-256
62bfd0910e1d9815b6915626d36d1058b28aa407638be86ce562523eaf99f811
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Spotify | Document: Spotify Privacy Policy | Record: CA-P-003898
Captured: 2026-04-28 08:47:36 UTC | SHA-256: 62bfd0910e1d9815…
URL: https://conductatlas.com/platform/spotify/spotify-privacy-policy/inferences-about-user-interests-age-and-preferences/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document