This analysis describes what Spotify's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The immediate deletion commitment limits the window during which sensitive age-verification data—which may include biometric or document information—is retained by Spotify.
Any data you provide for an Age Check is not retained by Spotify beyond the moment the check is finished.
How other platforms handle this
we will delete your account data after three years of inactivity.
We may continue to retain some information even after you delete your account if we are required to do so in order to comply with applicable laws.
Except for the IP address used to create your account, Reddit will delete any IP addresses collected after 100 days.
"All Age Check Data is deleted immediately after the Age Check.Excerpt from Spotify's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The immediate deletion commitment limits the window during which sensitive age-verification data—which may include biometric or document information—is retained by Spotify.
Any data you provide for an Age Check is not retained by Spotify beyond the moment the check is finished.
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Spotify.