Privacy Policy

This Privacy Policy explains how PlaylistStalker ("we", "us") collects, uses, and protects information when you use our Service. We respect your privacy and are committed to keeping your data secure.

1. Information We Collect

Account information

• Email address (required to create an account)
• Hashed password (we never store plain-text passwords)
• Display name and public profile data, if you choose to set them

Usage data

• Spotify playlist IDs you choose to track
• Alert thresholds, placements, and other content you create in the Service
• Basic analytics: pages visited, features used, timestamps, IP address, browser type

Billing data

• For paid plans, our payment processor Paddle collects your billing information. We receive a customer reference, subscription status, and the last 4 digits of your card — we do not store full card numbers.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To send transactional emails (alerts, password resets, billing receipts)
• To send service announcements (you can opt out of non-essential email)
• To detect, prevent, and respond to abuse, fraud, or security incidents
• To comply with legal obligations

3. Third-Party Services

We share data only with the service providers required to operate the Service:

• Paddle — payment processing and merchant of record (billing data)
• Resend — transactional email delivery (your email + message content)
• Cloud hosting provider — database, authentication, and backend infrastructure
• Spotify Web API — read-only public playlist data; we send playlist IDs, never your email

We do not sell your personal information to third parties.

4. Cookies

We use cookies and similar technologies strictly necessary for the Service to function, such as authentication session cookies. We do not use third-party advertising or cross-site tracking cookies.

5. Data Retention

We retain your account data for as long as your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required for legal, accounting, or security reasons.

6. Your Rights

Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Export your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise these rights, email support@playliststalker.com.

7. Security

We use industry-standard safeguards including encryption in transit (TLS), encrypted password hashing, role-based access controls, and audit logging. No method of transmission over the internet is 100% secure, but we work hard to protect your data.

8. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

9. International Transfers

Your data may be processed in countries outside your own. We rely on standard contractual clauses and equivalent safeguards where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the Service.

11. Contact

Questions or requests? Email support@playliststalker.com.