Privacy Policy

Spotify Dedup is run by José M. Pérez as an individual. For any privacy question — access, correction, deletion, portability — write to jmperez1985 AT gmail.com.

We collect different things in different flows. Nothing is sold or shared for advertising.

• When you log in with Spotify we store your Spotify user id, display name and email address. We use the email only to identify you across visits and to reach out about the service (e.g. an issue with your data, or a future feature announcement we think you might care about). Any such email will include an unsubscribe link, and you can opt out at any time by writing to the address above.
• When you donate via Stripe or PayPal we store the donation amount and currency, the payment-processor transaction id, your name and email as captured by the payment processor, and the optional message you typed. If you were logged in we also link the donation to your Spotify user id.
• While you use the app we record a small number of product events (login, scan started, duplicates removed, etc.) keyed by your Spotify user id. The event payload itself contains counts and outcomes, not track names or playlist contents.
• If you choose to send an error report we store a redacted diagnostic snapshot. Track names, display names, authorization headers and bearer tokens are scrubbed in your browser before submission.

• We don't persist your IP address. The header we read to detect your country for currency selection (and to rate-limit error reports) is used in-memory and never written to the database.
• We don't store the contents of your playlists or your listening history on our servers. Deduplication happens in your browser against the Spotify API; we only see aggregate counts.
• We don't use advertising, cross-site tracking, or third-party retargeting cookies.

• Spotify— we use Spotify's OAuth to read and modify your library. Spotify is the source of truth; revoke our access at any time in your Spotify account's Apps page.
• Stripe— processes card donations. Stripe's privacy policy applies to what they collect during checkout.
• PayPal — processes PayPal donations and sends us an IPN notification with the donor name and email.
• Simple Analytics — privacy-friendly page view counter. No cookies, no personal data sent.
• Resend — used to email me (the operator) when a user submits an error report. Your Spotify user id and the failing step are in the email; the redacted snapshot stays in our database.

We don't currently apply a fixed retention period. If you'd like your data removed, email the address above and we'll delete the matching rows (users, donations, events, diagnostics) within a reasonable time. If you've donated, we may keep the bare minimum required for tax and accounting purposes (transaction id, amount, currency, date) for as long as the relevant tax authority requires.

If you're in the EU/EEA, UK, or another jurisdiction with similar rules, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive your data in a portable format. Email us and we'll respond. You also have the right to lodge a complaint with your local data protection authority.

We'll update the date at the top of this page when material changes happen. The current version is dated 2026-06-01.