Spotify uses your listening habits and data from other websites and apps to show you personalized ads, and shares your data with advertising partners for this purpose — but you can opt out via your account settings or a link in the website footer.
Your personal data — including your listening history and behavioral data from third-party sources — is shared with advertising partners for targeted advertising on Spotify's free and paid services (including podcasts), meaning even Premium subscribers may receive targeted ads in some content.
How other platforms handle this
You can access, amend, download, and delete your personal information by logging into your Dropbox account and going to your account settings page. You can also ask us for a copy of personal data you provided to us or that we've collected, the business or commercial purpose for collecting it, the ty...
Our websites and services are not directed at children. We do not knowingly collect Personal Data from children under the age of 13. We do not knowingly collect Personal Data for children between 13-18 unless we have obtained consent from a parent or guardian, such collection is subject to a separat...
To delete your information, you can: Delete your content from specific Google services; Search for and then delete specific items from your account using My Activity; Delete specific Google products, including your information associated with those products; Delete your entire Google Account.
This constitutes 'sharing' of personal data under CPRA, triggering opt-out rights for California residents, and similar rights under other state privacy laws — failure to honor opt-outs exposes Spotify to regulatory action.
(1) REGULATORY FRAMEWORK: This provision directly implicates CPRA 'sharing' for cross-context behavioral advertising (Cal. Civ. Code §1798.120), requiring a clear opt-out mechanism equivalent to a 'Do Not Sell or Share My Personal Information' link. Virginia VCDPA §59.1-578, Colorado CPA §6-1-1306, Texas TDPSA, and Connecticut CTDPA all include analogous targeted advertising opt-out rights. The California Privacy Protection Agency (CPPA) and respective State AGs are primary enforcement authorities. FTC Act Section 5 also applies to any deceptive representations about the scope or effectiveness of the opt-out. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.