Privacy Policy

DATED 2026-06-12 · VERSION 20260701_rev01 · COMPARED WITH 20260601_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20260601_rev01 to 20260701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Effective as of 13 April 2026
+Effective as of June 12, 2026
 [1\. About this Policy]()
 [2\. Your personal data rights and controls]()
 [3\. Personal data we collect about you]()
 [7\. Transfer to other countries]()
 [8\. Keeping your personal data safe]()
 [9\. Children]()
+[10\. Privacy Request Metrics]()
+[10\. Third-Party Links]()
+[11\. Changes to this Policy]()
+[11\. Privacy Request Metrics]()
+[12\. How to contact us]()
+[12\. Changes to this Policy]()
+## **1\. About this Policy**
+[13\. How to contact us]()
+## 1\. About this Policy
 This Privacy Policy describes how we at Spotify USA Inc. process personal data of U.S. residents. From now on, we'll call it the 'Policy'.
 It applies to your use of:
 - all Spotify streaming services as a user. For example this includes:
     - your use of Spotify on any device
     - the personalization of your user experience. Watch [our personalization explainer video](https://www.spotify.com/us/safetyandprivacy/learn-more-about-privacy) to learn more about this.
     - the infrastructure required to provide our services
     - connection of your Spotify account with another application
+    - both our free or paid streaming options (each a '**Service Option**')
+- other Spotify services which include a link to this Policy. These include Spotify websites, Customer Service and the [Community Site](https://community.spotify.com/).
+    - our free or paid streaming options (each a '**Service Option**')
+- other Spotify services which include a link to this Policy. These include Spotify websites, Customer Service, and the Community Site.
 From now on, we'll collectively call these the '**Spotify Service**'.
 From time to time, we may develop new or offer additional services. They'll also be subject to this Policy, unless stated otherwise when we introduce them. Our [California Notice at Collection](https://www.spotify.com/us/legal/notice-at-collection/) as required by the California Consumer Privacy Act applies to residents of California. If you are a resident of California, you should read this notice together with this Policy.
 **This Policy is _not_...**
+- the Spotify [Terms of Use](https://www.spotify.com/legal/end-user-agreement/), which is a separate document. The Terms of Use outline the legal contract between you and Spotify for using the Spotify Service. It also describes the rules of Spotify and your user rights
+- the Spotify [Terms of Use](https://www.spotify.com/legal/end-user-agreement/), which is a separate document. The Terms of Use outline the legal contract between you and Spotify for using the Spotify Service. It also describes the rules of Spotify and your rights under your agreement.
 - about your use of other Spotify services which have their own privacy policy, such as Megaphone.
 **Other resources and settings**
 Key information about your personal data is right here in this Policy. However, you might want to take a look at our other privacy resources and controls:
     - turn off messaging with other users (if messaging is available in your market)
 On the 'Explicit Content' setting you can control whether explicit-rated content can be played on your Spotify account.
 - [Cookies Policy](https://www.spotify.com/legal/cookies-policy/): Information on how we use cookies and how to manage your cookie preferences. Cookies are files saved on your phone, tablet or computer when you visit a website.
+## **2\. Your personal data rights and controls**
+## 2\. Your personal data rights and controls
 Certain U.S. states have adopted privacy laws that give certain rights to individuals over their personal data. We provide these rights to all residents of the U.S., regardless of where they live.
 The table below explains:
 - your rights
 - how to exercise them
 You can also watch our video about [Your Privacy Controls](https://www.spotify.com/us/safetyandprivacy/learn-more-about-privacy). You will not receive discriminatory treatment for exercising any of your privacy rights.
+|
+**It's your right to..**
+**It's your right to...**
+ |
 **How?**
+ |
 To request a copy of your personal data from Spotify, either:
 - use the 'Download your data' tool on your [Account Privacy](https://www.spotify.com/account/privacy/) page, or
 - [contact us]()
+When you download your data you will receive the information about your data that Spotify has to provide under applicable laws. If you would like more information about how we process your personal data, you can [contact us]().
+When you download your data you will receive the information about your data that Spotify has to provide under applicable laws. If you would like more details about how we process your personal data, you can [contact us]().
+ |
+|
 **Correction**
+ |
 There are several ways you can delete personal data from Spotify:
 - to remove audio content you have saved, select the relevant content and choose to remove it. For example you can remove a track from your playlist or remove an artist you've saved to your library
 - to request deletion of your account data from Spotify and close your account, follow the steps on our [support page](https://support.spotify.com/article/close-account/). This data includes your User Data, Usage Data and other data listed in [Section 3 'Personal data we collect about you]()'
+- for any other deletion requests, you can [contact us]() or reach out to customer support via our [chat bot](https://support.spotify.com/us/contact-spotify-privacy/)
+- for any other deletion requests, you can [contact us]()
+ |
+|
 **Opt-out of tailored advertising**
+ |
 **Request to opt out of the processing of your personal data for tailored advertising.**
+For more information about our processing for these purposes, see the section 'Tailored advertising controls' below.
+For more information about our processing for these purposes, see the section '[Tailored advertising controls]()' below.
+ |
 You can exercise your right to opt out through the '[Tailored Ads](https://www.spotify.com/account/privacy/)' setting.
 If you do not have an account or are not logged in, you can also opt-out by clicking the ['Your Privacy Choices'](https://www.spotify.com/us/legal/privacy-policy/) link at the footer of our website.
 **Household requests**
 If all the members of a household make an access, correction or deletion request, we will respond as if the requests are individual requests.
 **Requests made through agents**
+You may designate, in writing or through a power of attorney (in accordance with local law), an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
+You may designate, in writing or through a power of attorney (in accordance with local law), an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
 **Appeals process**
 If your request is denied you may have the right to appeal the denial in accordance with the instructions provided to you when the denial was made.
+#### **Tailored advertising controls**
+**Tailored advertising controls**
 What is tailored advertising?
+- This is when we use information about your use of our services and other websites and mobile apps to tailor ads to be more relevant to you. This is also known as interest based advertising, targeted advertising, or 'sharing' for purposes of cross-context behavioral advertising.
+- An example of tailored advertising is when an advertising partner provides us with information indicating that you may be interested in cars. This could enable us to show you ads about cars.
+- This is when we use information about you to personalize ads to be more relevant. This is also known as interest based advertising, targeted advertising, or what some states may define as, 'sharing or selling' for purposes of cross-context behavioural advertising.
+- An example of tailored advertising is when an advertising partner provides us with information about topics you may be interested in, such as suggesting you might enjoy cooking. This could enable us to show you ads about blenders.
 How to control tailored advertising:
 - You can control tailored advertising through the '[Tailored Ads](https://www.spotify.com/account/privacy/)' setting.
 - If you do not have an account or are not logged in, you can also opt-out by clicking the ['Your Privacy Choices'](https://www.spotify.com/us/legal/privacy-policy/) link at the footer of our website.
 - You can also control tailored advertising for some podcasts using the link in the episode's show description. This applies where the content provider inserts advertising into the podcast to fund it. The hosting provider, which might not be Spotify, manages these controls for the podcast.
 - You can also visit our services via a browser with a recognized opt-out preference signal enabled, such as the Global Privacy Control (GPC). If you use a preference signal you may need to renew your preferences if you visit the Spotify Service with another device or browser, or if you clear your cookies.
+If you are 'opted out' of tailored advertising, you will receive less relevant advertising, including on our free Service Option, as well as our paid Service Option, as applicable (for example, advertising in podcasts). This type of advertising is based on your registration information and what you are currently listening to on our services. For example, if you are listening to a cooking podcast, you may hear an ad for a food processor.
+If you are 'opted out' of tailored advertising, you will receive less relevant advertising, including on our free Service Option, as well as our paid Service Option, as applicable (for example, advertising in podcasts). This type of advertising is based on your registration information and information about your real-time usage of Spotify, such as what you are currently listening to on our services. For example, if you are listening to a cooking podcast, you may hear an ad for a food processor.
 Appropriate age for tailored advertising:
 - Younger users may have tailored advertising turned off by default. When you reach the appropriate age, you will start to receive tailored advertising. When this happens, you will receive a message within the Spotify Service to let you know. This message will contain a link to the [Tailored Ads](https://www.spotify.com/account/privacy/) setting where you can change your preferences or 'opt-out' of tailored advertising at any time.
+## **3\. Personal data we collect about you**
+## 3\. Personal data we collect about you
 These tables set out the categories of personal data we collect from you. You can also watch our video about [Personal Data at Spotify](https://www.spotify.com/us/safetyandprivacy/learn-more-about-privacy).
+|
 **Collected when you sign up for the Spotify Service or when you update your account**
 - mobile phone number
 - details of your purchase and payment history
+ |
+|
+Precise Location Data
+ |
+Spotify will only use your precise location data with your permission. You can grant this access through the in-app pop-up and in your device settings. This information allows Spotify to offer a number of features such as better recommendations for nearby concerts and events.
+ |
+|
 Survey and Research Data
+ |
 When you respond to a survey or take part in user research, we collect and use the personal data you provide as described in the survey or research.
+ |
+|
+Customer Service Data
+ |
+Information about your contacts with our Customer Service, such as chat conversations and email correspondence.
+ |
 We receive some of the data mentioned above from third parties. The below table describes the categories of those third parties.
+|
 **Third party sources that we receive your data from**
+ |
 These third party apps, services or devices may include:
 - social media
 - devices including:
     - audio (e.g. speakers and headphones)
+    - smart watches
+    - wearables (e.g., smart watches)
     - televisions
     - mobile phones and tablets
     - automotive (e.g. cars)
     - games consoles
 - services or platforms such as voice assistants or content platforms
+ |
 We work with technical service partners that give us certain data. This includes mapping IP addresses to non-precise location data (e.g., country or region, city, state).
 This makes it possible for Spotify to provide the Spotify Service, content, and features.
+We also work with security service providers who help us protect user accounts.
+We also work with technical service partners who help us protect user accounts.
+ |
 User Data
 Usage Data
+|
 Payment partners and Merchants
+ |
+If you choose to pay through third parties (e.g. telco carriers) or by invoice, we may get data from our payment partners.
+If you choose to pay through third parties or by invoice, we may get data from our payment partners.
 This allows us to:
 - send you invoices
 - process your payment
 - give you what you've purchased
 Advertising and marketing partners
+ |
 We receive data about you from certain advertising or marketing partners, including device identifiers such as hashed contact information. They also provide us with inferences, which are the partners' understanding of your interests and preferences.
+This allows us to deliver more relevant ads and marketing, and measure their performance.
+This allows us to deliver more relevant ads and marketing and measure their performance.
+ |
 Usage Data
+ |
 Usage Data
+ |
 If you download the Spotify mobile app and try Spotify using a logged out user experience, we will collect limited information about your usage of the Spotify Service, including Usage Data. We do this to understand how you are accessing and using the Service. We also do this to ensure we provide the right experience for you, for example based on your country or region. If you decide to create a Spotify account to experience our service in full, then we will combine this data with your Spotify account data.
+## **4\. Our purpose for using your personal data**
+## 4\. Our purpose for using your personal data
 The table below sets out:
 - our purpose for processing your personal data
 - categories of personal data which we use for each purpose. See more about these categories in [Section 3 'Personal data we collect about you']()
 - Survey and Research Data
 - Age Check Data
+ |
+|
+To improve our personalized recommendations and to improve the Spotify experience for all users, based on precise location data (where available and explicitly permitted by you).
+For example, we can provide better personalized concert and event recommendations or let you know what is trending at your specific location. What we learn from your streaming at one location, could be used to suggest similar content to other users close to that location.
+ |
+- Precise Location Data
+ |
+|
 To diagnose, troubleshoot, and fix issues with the Spotify Service.
+ |
 - User Data
 - Usage Data
 - Voice Data
 - Message Data
+- Customer Service Data
+ |
+|
 To evaluate and develop new features, technologies, and improvements to the Spotify Service. This includes development and training of algorithmic and machine learning models, which help us to keep our service safe and enhance our users' experience. For example:
+ |
 - User Data
 - Usage Data
 - Voice Data
 - Survey and Research Data
+- Customer Service Data
+ |
+|
 For marketing or advertising purposes.
 - Street Address Data
 - Usage Data
 - Voice Data
 - Message Data
 - Payment and Purchase Data
 - Survey and Research Data
+- Precise Location Data
+- Customer Service Data
+ |
+|
 To fulfill contractual obligations with third parties.
 - Voice Data
 - Payment and Purchase Data
+ |
+|
+To take appropriate action with reports of intellectual property infringement and inappropriate content.
+To detect, investigate and take appropriate action on reports of possible inappropriate content or violation of our Terms of Use or other Spotify terms, policies, rules or guidelines.
+ |
 - User Data
 - Usage Data
 - Voice Data
 - Message Data
 - Payment and Purchase Data
+- Customer Service Data
+ |
+|
 To establish, exercise, or defend legal claims.
 - Street Address Data
 - Usage Data
 - Voice Data
 - Message Data
 - Payment and Purchase Data
 - Survey and Research Data
+- Customer Service Data
+ |
+|
 To conduct business planning, reporting, and forecasting.
 - User Data
 - Street Address Data
 - Message Data
 - Usage Data
 - Payment and Purchase Data
+- Customer Service Data
+ |
+|
 To conduct research and surveys.
 - Usage Data
 - Voice Data
 - Survey and Research Data
+ |
+## **5\. Disclosing your personal data**
+## 5\. Disclosing your personal data
 This section sets out who receives personal data which is collected or generated through your use of the Spotify Service.
+**Publicly available information**
+**Information available to other Spotify users**
+The following personal data will always be publicly available on the Spotify Service (except to any user you have blocked):
+The following personal data is available to other Spotify users:
 - your profile name
+- your profile photo
+- your public playlists
+- your profile photo, if you choose to upload one
+- your public playlists, and any associated titles, descriptions and images
 - other content you post on the Spotify Service, and any associated titles, descriptions and images
+- the number of people who you follow and the number of people who follow you on the Spotify Service (the profiles of those people may be visible depending on your settings)
 You or another user can share certain information on third party services, like social media or messaging platforms. This includes:
 - your profile
 - any content you post on Spotify and details about that content
 - your playlists and any associated titles, descriptions and images
 - Age Check Data
+ |
 So they can provide their services to Spotify.
+These service providers include those we hire to:
+Examples of such service providers include those we hire to:
 - give customer support
 - operate the technical infrastructure we need to provide the Spotify Service
 - assist in protecting and securing our systems and services (e.g. Google's reCAPTCHA)
 - help market Spotify's (and our partners') products, services, events and promotions
 - verify your eligibility for certain types of Service Options (e.g., Spotify Premium Student)
 - User Data
 - Usage Data
+ |
+So they can help us deliver more relevant advertising to you on the Spotify Service, and help measure the effectiveness of ads.
+So Spotify and our advertising partners can deliver more relevant advertising to you on the Spotify Service and online, and help measure the effectiveness of ads.
+For example, our ad partners help us facilitate tailored advertising.
+We do not disclose personal data to advertising partners for users under the age of 18.
+ |
+|
 Marketing Partners
 - Message Data
 - Payment and Purchase Data
 - Survey and Research Data
+ |
+If we were to sell or negotiate to sell our business to a buyer or possible buyer.
+If we were to sell or negotiate to sell any part of our business to a buyer or possible buyer.
 In this case, we may transfer your personal data to a successor or affiliate as part of that transaction.
+ |
 **Courts and Authorities:** We may process and share your personal data to comply with a request from courts, authorities, parties to litigation, or other authorized third parties. We will do so when we believe in good faith it is necessary, including:
 - to comply with a legal obligation
 - to respond to a valid legal process (such as a search warrant, court order, or subpoena)
 - for our own or a third party's justifiable interest such as criminal investigations, litigation, protecting someone's safety, or preventing death or imminent bodily harm
 The categories of personal data processed or shared will depend on the nature of the specific request.
+## **6\. Data retention**
+## 6\. Data retention
 We keep your personal data only as long as necessary to provide you with the Spotify Service and for Spotify's legitimate and essential business purposes, such as:
 - maintaining the performance of the Spotify Service
 - making data-driven business decisions about new features and offerings
 - complying with our legal obligations
 It's your right to request that we delete certain of your personal data. See the section on '[Deletion]()' in [Section 2 'Your personal data rights and controls']() for more information, and the circumstances in which we can act on your request.
 You can also delete certain personal data directly from the Spotify Service: for example, you can edit or delete your profile picture. Where users are able to see and update the personal data themselves, we keep the information for as long as the user chooses unless one of the limited purposes described below applies.
 - **Data that expires after a specific period of time**
+We have set certain retention periods so that some data expires after a specific period of time. For example, personal data you may input as part of search queries is generally deleted after 90 days.
+Subject to other applicable retention rules listed in this Section 6, we have set certain retention periods so that data expires after a specific period of time. For example, personal data you may input as part of search queries is deleted after 90 days.
 - **Data retained until your Spotify account is deleted**
+We keep some data until your Spotify account is deleted. Examples of this include your Spotify username and profile information. We also typically keep streaming history for the life of an account, for example, to provide retrospective playlists that users enjoy and personalized recommendations that take listening habits into account (for example, Your Time Capsule or Your Summer Rewind). When your Spotify account is deleted, this category of data is deleted or de-identified.
+We keep some data until your Spotify account is deleted. Examples of this include your Spotify username and profile information. We also keep streaming history for the life of an account, for example, to provide retrospective playlists that users enjoy and personalized recommendations that take listening habits into account (for example, Your Time Capsule or Your Summer Rewind). When your Spotify account is deleted, this category of data is deleted or de-identified.
 - **Data retained for extended time periods for limited purposes**
 After your account is deleted, we keep some data for a longer time period but for very limited purposes. For example, we may be subject to legal or contractual obligations that require this. These may include mandatory data retention laws, government orders to preserve data relevant to an investigation, or data kept for the purposes of litigation. We may also keep data that has been removed from the Spotify Service for a limited period of time. This could be:
 - to help ensure user safety, or
 - to protect against harmful content on our platform.
 - **Age Check Data** is deleted immediately after your Age Check is complete.
+## **7\. Transfer to other countries**
+## 7\. Transfer to other countries
 Because of the global nature of our business, Spotify transfers personal data internationally with Spotify group companies, subcontractors and partners when carrying out the activities described in this Policy.
 Whenever we transfer personal data internationally, we use tools to make sure the data transfer complies with applicable law.
 We also identify and use additional protections as appropriate for each data transfer. For example, we use:
 - technical protections, such as encryption and pseudonymization
 - policies and processes to challenge disproportionate or unlawful government authority requests
+## **8\. Keeping your personal data safe**
+## 8\. Keeping your personal data safe
 We're committed to protecting our users' personal data. We put in place appropriate technical and organizational measures to help protect the security of your personal data. However, be aware that no system is ever completely secure.
 We have put various safeguards in place to guard against unauthorized access and unnecessary retention of personal data in our systems. These include pseudonymization, encryption, access, and retention policies.
 To protect your user account, we encourage you to:
 - limit access to your computer and browser
 - log out once you have finished using the Spotify Service on a shared device
 - read more detail on [protecting your account](https://support.spotify.com/article/protect-your-account/)
 You can log out of Spotify in multiple places at once by using the 'Sign out everywhere' function on [your account page](http://www.spotify.com/account).
+If other individuals have access to your Spotify account, then they can access personal data, controls and the Spotify Service available in your account. For example, you might have allowed someone to use your account on a shared device.
+If other individuals have access to your Spotify account, then they can access personal data, controls and the Spotify Service available in your account. For example, someone might use your account on a shared device.
+It's your responsibility to only allow individuals to use your account where you're comfortable sharing this personal data with them. Anyone else's use of your Spotify account may impact your personalized recommendations.
+It's your responsibility to only allow this to happen if you're comfortable sharing your personal data with them. Anyone else's use of your Spotify account may impact your personalized recommendations.
+## **9\. Children**
+## 9\. Children
 Note: This Policy doesn't apply to [Managed Accounts](https://www.spotify.com/legal/managed-account-plan-manager-privacy-policy/) or [Spotify Kids](https://www.spotify.com/legal/kids-privacy-policy/) except where those respective privacy notices say so.
 The Spotify Service (outside of Managed Accounts or Spotify Kids) that is tied to this privacy policy has a minimum age limit in each country or region (the "Age Limit").
 If you're under the Age Limit, do not create or use the standard Spotify Service. Instead, we recommend asking a parent or guardian to create a Managed Account for you, where available. If you are above the Age Limit but under the age of majority in your country (a "Minor"), you may use the Spotify Service only with the consent of your parent or legal guardian.
 We do not knowingly collect or use personal data from children under the applicable Age Limit outside of Managed Accounts or Spotify Kids. If you are a parent or guardian and become aware that your child, who is under the application Age Limit, has provided personal data to Spotify in any other context, [contact us](). If we learn that we've collected the personal data of a child under the applicable Age Limit, we'll take reasonable steps to delete the personal data. This may require us to delete the Spotify account for that child.
 When using a shared device on the Spotify Service, be cautious about playing or recommending any inappropriate content to individuals to Minors.
+## **10\. Privacy Request Metrics**
+## 10\. Third-Party Links
+The Spotify Service may include links to third-party websites, plug-ins and applications. Clicking on such links may allow third parties to collect or share data about you. Spotify does not control these third-party websites and is not responsible for their privacy practices.
+## 11\. Privacy Request Metrics
 The following chart contains statistics about global requests we received from users between 1 January and 31 December 2024:
+|
 **Type of request**
+ |
 day
+ |
 \*Adjustments in the user account within the Service made either by the user themselves or aided by customer services are not counted as correction requests (e.g., user updated their display name)
+## **11\. Changes to this Policy**
+## 12\. Changes to this Policy
 We may occasionally make changes to this Policy.
 When we make material changes to this Policy, we'll provide you with prominent notice as appropriate under the circumstances. For example, we may display a prominent notice within the Spotify Service or send you an email or device notification.
+## **12\. How to contact us**
+## 13\. How to contact us
 For any questions or concerns about this Policy, contact our Data Protection Officer any one of these ways:
+- email privacy@spotify.com
+- write to us at: Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA
+- Email us at privacy@spotify.com
+- write to us at: Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA, Attn: Data Protection Officer
 Spotify USA Inc. is the data controller of personal data processed under this Policy.
 © Spotify USA Inc.