Privacy Policy Update

When our new Privacy Policy started rolling out two weeks ago, it created some understandable confusion. In a follow-up post, we did our best to explain the intent behind the changes in the Policy and our commitment to our users’ privacy. We also said that we would work to update the Privacy Policy to reflect what we promised in that post. As we worked to do that, we took note of many people’s comments that they appreciated the clear commitments in the blog post that were easier to understand than some of the details in the Policy itself.

So we’ve kept our promise to update the Policy, but we’ve also gone a step further by incorporating a plain language introduction in the Policy itself. The Introduction is intended to be a clear statement of our approach and principles about privacy. We hope it provides a healthy dose of clarity and context too. Yes, we still need to provide greater detail in the body of the policy, but those details are, and will always be, in keeping with the fundamental privacy principles we outline in the Introduction. The new Policy will begin rolling out to users in the coming days and weeks.

A little housekeeping: many users accepted the new Policy when we started rolling it out in some markets a few weeks ago. If you’ve already accepted that version, you will be automatically covered by this update, including the clearer language, additional privacy commitments and the new Introduction and its principles. All other users will be offered the opportunity to read and accept the new Policy over the coming days and weeks.

In the meantime, please give the Introduction a read; there’s a link to the whole Policy below as well.

Complete Privacy Policy

Privacy Policy Introduction

Thanks for choosing Spotify. This is our Privacy Policy. Before getting into the details, we’d like to highlight some of the key principles behind it. These principles are important to us because we know they’re important to you.

The Privacy Policy is here to do three things:

  1. Explain the way we use information that you share with us in order to build a great product and give you a great experience with it;
  2. Ensure that you understand what information we collect with your permission, and what we do — and do not do — with it;
  3. Hold us accountable for protecting your rights and your privacy under this policy.

**All the information we collect is related to providing the Spotify service and its features.**

Broadly speaking, there are two categories of information we collect: 1) information that we must have in order for you to use Spotify; and 2) information that we can use to provide additional features and improved experiences if you choose to share that information.

The first category includes:

* Registration information, including your name, birth date, address, and other information you provide when you sign up for Spotify.

* Broad, non-specific location, which we derive from your IP address. Our licenses to deliver music and other content to you are location-specific, so we need to know what country you’re in. This also enables us to make suggestions based on your general location, like concerts or performances.

* The music you listen to and your interactions with the Service. This allows us to make recommendations to you and suggest relevant content. You can choose whether or not to share this information with your friends, followers, or the public.

* Technical and sensor information necessary to operate Spotify. This includes the type of browser and device you use, data from the touchscreen, and information from your device’s accelerometer and gyroscope sensors. This enables you to control Spotify and allows us to do simple things like rotate videos and recommend music based on whether you’re sitting still or running.

The second category includes information that enables us to offer you additional features. We never receive any of the following information unless you expressly choose to share it with us. It’s as simple as that. Here are some examples:

* Your specific location: We will never gather or use your specific device location without first getting your explicit permission. This information enables us to create collaborative listening experiences (only with others who have also given permission), and to provide even better recommendations about locally popular music, live venues, and concerts.

*Your photos: We will only access images that you specifically choose, and we will never scan or import your photo library or camera roll. This allows you to choose individual pictures to change your profile picture or create cover art for a playlist. You can stop sharing photos and revoke access at any time.

*Your contacts: We will never scan or import your contacts unless you ask us to. If you choose to do so, we will only use your contact information to help you find friends or contacts who use Spotify.

*Your microphone: We will never access or use your microphone unless you give us explicit permission. This could enable you to control Spotify with your voice, and you will alway have the ability to disable access to the microphone.

The distinction between these two categories is important. Information in the first category is information you must provide in order to use Spotify. When you agree to our Privacy Policy, you give us the right to collect this information and use it for the purposes described. Information in the second category is information we will only collect if you explicitly give us permission to do so in the future. For this second category of information, we will ask for your permission before first accessing it, we will describe how we will use it if you give us permission, we will only use the information for the purpose we described, and you will always have the ability to change your mind and revoke that permission. Acceptance of our Privacy Policy does not mean you have granted us permission to access or use information in the second category; we’re just explaining to you that one day we might ask you for that permission.

**We will be clear with you about how and when we might share information.**

In some contexts, we will share certain information. For example, like most services, if you sign up for Spotify through a third party like Facebook or a mobile provider, we share some information with them and they share some information with us in order to enable your account. And we also share de-identified information with our music industry partners to help them understand how the content they license to us is performing, with marketing partners who help us with promotional efforts, and with advertisers that allow us to offer a free service. There also may be times when you want us to share information. For example, when you make playlists, you might want those playlists to be visible to your friends… and you might not. Similarly, you can ask us to share information (like your email address) with artists or record labels, or other partners who may want to directly send you news or promotional offers, but you can also revoke that permission at any time.

***

We hope this helps you to understand our privacy commitments to you. Now, the details await you below, but please remember that this Introduction is part of the Privacy Policy itself — it’s our promise to you. If you ever have any questions or concerns, then please let us know at privacy@spotify.com