Spotify: Music and Podcasts

"Your device sensor data: Motion-generated or orientation-generated device sensor data if needed to provide features of the Spotify Service that require this data. This is data which your device collects about the way you move or hold your device. Your technical data examples include: device IDs, network connection type, provider, browser type, information which enables us to discover and connect with third party devices and applications. Examples of this information are the device name, device identifiers, brand and version. Examples of third party devices and applications are: devices on your wifi network (such as speakers) which can connect to the Spotify Service."

Spotify collects motion/orientation sensor data, device IDs, network information, and scans for devices on your WiFi network — going beyond what's strictly necessary for a music streaming service.

"Your general (non-precise) location: Your general location includes country, region or state. We may learn this from technical data (e.g. your IP address, language setting of your device) or payment currency. We also work with technical service partners that give us certain data. This includes mapping IP addresses to non-precise location data (e.g., country or region, city, state)."

Spotify tracks your general location using IP address geolocation down to the city level, working with third-party technical service partners to map IP addresses to location data.

"We may occasionally make changes to this Policy. When we make material changes to this Policy, we'll provide you with prominent notice as appropriate under the circumstances. For example, we may display a prominent notice within the Spotify Service or send you an email or device notification."

Spotify reserves the right to change the privacy policy at any time, with notice provided only 'as appropriate under the circumstances' at their discretion, and no mechanism for user consent to the changes.

"We share certain data, such as your IP address, with the hosting platforms when you play a podcast. Advertising partners: User Data, Usage Data. So they can help us deliver more relevant advertising to you on the Spotify Service. Marketing Partners: User Data, Usage Data. Examples of partners include: marketing or sponsorship partners, websites and mobile apps who sell us advertising space on their services, device, app and mobile partners who also offer Spotify promotions."

Spotify shares personal data with a wide range of third parties including service providers, payment partners, advertising partners, marketing partners, podcast hosting platforms, academic researchers, and group companies.

"We also typically keep streaming history for the life of an account, for example, to provide retrospective playlists that users enjoy and personalised recommendations that take listening habits into account. Data retained for extended time periods for limited purposes: After your account is deleted, we keep some data for a longer time period but for very limited purposes. For example, we may be subject to legal or contractual obligations that require this."

Spotify retains your full streaming history for the entire life of your account and continues to retain some data even after account deletion for unspecified 'extended time periods.'

"We receive inferences from certain advertising or marketing partners. These inferences are the partners' understanding of your interests and preferences. This allows us to deliver more relevant ads and marketing. Our partners may also combine the personal data we share with them with other data they collect about you, e.g. your use of their services. We and our partners may use this information to present you with offers, promotions, or other marketing that we think you'll find relevant."

Spotify receives interest inferences from advertising partners and allows partners to combine Spotify data with data from their own services, enabling cross-service profiling and tracking of users across platforms.