Privacy Policy
Effective date: August 27, 2026
SpotifyTracked.com ("we", "us", or "the Service") is a public analytics dashboard that displays Spotify artist metrics such as monthly listeners, followers, streaming counts, and historical trends. This Privacy Policy explains what information is collected when you use SpotifyTracked.com, how it is used, and what choices you have.
1. Information We Collect
1.1 No Account or Personal Data
SpotifyTracked does not require you to create an account, log in, or provide any personal information such as your name, email address, or payment details. We do not collect or store any personally identifiable information.
1.2 Analytics Data (PostHog)
We use PostHog, a product analytics platform, to understand how visitors interact with the Service. When PostHog is active, it may collect the following:
- Pages visited and navigation patterns
- Clicks and interactions with interface elements
- Session duration and page leave events
- Browser type, operating system, and screen size
- Approximate location based on IP address (processed by PostHog)
- Session recordings of your interactions with the page
Before you choose a cookie preference, PostHog assigns an anonymous identifier in
sessionStorage. It is limited to the current browser session and supports navigation continuity
without analytics cookies or session replay. If you accept analytics cookies, the identifier may persist through localStorage and cookies and session replay may start. We do not link this identifier to information you submit because the Service
has no user accounts.
1.3 Local Storage
The Service stores a small amount of data in your browser's local storage to improve your experience. This includes:
- Theme preference - your choice of light or dark mode
- Recent searches - up to 5 recent artist search queries
- Session page - the current rankings page for back-navigation
- Device watchlist - saved artist IDs, names, image references, locale, and save times
- Notification credentials - an anonymous subscription ID and one-time management token when you enable browser notifications
Theme, search, and navigation preferences stay in your browser. If you explicitly enable notifications, watched artist IDs, locale, and browser-provided push endpoint and encryption key material are sent to our backend so it can deliver alerts. No account or cross-device identity is created.
2. Cookie Consent
When you first visit SpotifyTracked, a cookie consent banner asks for permission before analytics cookies, persistent analytics storage, or session replay are enabled. Limited session-scoped PostHog analytics run before your choice and after rejection without setting analytics cookies.
You can change your preference at any time by clicking "Cookie Settings" in the footer of any page. If you withdraw consent, persistent analytics storage is cleared, session replay stops, and analytics return to session-scoped mode. A browser Do Not Track signal disables capture.
3. Cookies
SpotifyTracked itself does not set first-party cookies. If you accept analytics cookies, the PostHog SDK may set
cookies in conjunction with localStorage to maintain session continuity. These cookies are used solely
for analytics purposes and contain no personal information.
Third-party services loaded by the page (such as Google Fonts) may also set cookies or collect connection data according to their own privacy policies.
Your cookie consent preference is stored in your browser's localStorage under the key spotifytracked_cookie_consent.
4. Do Not Track
We respect the Do Not Track (DNT) signal sent by your browser. When DNT is enabled, PostHog analytics will not capture any data about your visit, regardless of your cookie consent preference.
5. Third-Party Services
The Service relies on the following third-party services:
- PostHog - product analytics and session replay. Data is sent to PostHog's servers (US-hosted).
See: PostHog Privacy Policy - Google Fonts - web font delivery. Your browser connects to Google's servers to load fonts, which
may expose your IP address to Google.
See: Google Privacy Policy - Spotify CDN - artist profile images are loaded from Spotify's content delivery network, which may expose your IP address to Spotify.
- flagcdn.com - country flag images used in audience data visualizations.
- Browser push services - your browser vendor processes an anonymous delivery endpoint and encrypted notification payload only after you enable notifications.
We do not sell, rent, or share any visitor data with third parties beyond the analytics described above.
6. Data Retention
We do not store any visitor data on our own servers. Analytics data collected by PostHog is retained according to PostHog's data retention policies. Local storage data in your browser persists until you clear it manually or clear your browser data.
An enabled anonymous push subscription remains on our server until you disable notifications, the browser endpoint expires, or it is removed during service cleanup. Successful notification fingerprints are retained in bounded form to prevent duplicate alerts.
7. Data About Spotify Artists
The metrics displayed on SpotifyTracked (monthly listeners, followers, streaming counts, artist biographies, etc.) are publicly available data sourced from third-party aggregators. This data relates to public artist profiles and does not constitute personal data of visitors to this site.
8. Children's Privacy
SpotifyTracked is not directed at children under the age of 13. We do not knowingly collect any personal information from children. Since the Service does not collect personal information from any user, no special provisions for children's data are required.
9. Your Choices
- Cookie consent - you can accept or reject analytics cookies when first visiting the site. You can change your decision at any time via the "Cookie Settings" link in the footer.
- Do Not Track - enable DNT in your browser settings to prevent analytics regardless of your cookie consent choice.
- Clear local storage - you can clear your browser's local storage and cookies at any time to remove theme preferences, recent searches, consent preferences, and analytics identifiers.
- Browser notifications - enable or disable alerts from your watchlist. You can also revoke notification permission in browser or operating-system settings.
- Block third-party scripts - you may use browser extensions or settings to block PostHog, Google Fonts, or other third-party resources.
10. Your Rights Under GDPR (European Economic Area)
If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):
- Right to access - you can request information about what data, if any, we process about you.
- Right to rectification - you can request correction of inaccurate data.
- Right to erasure - you can request deletion of your data.
- Right to restrict processing - you can request that we limit how your data is used.
- Right to data portability - you can request your data in a structured, machine-readable format.
- Right to object - you can object to the processing of your data.
- Right to withdraw consent - you can withdraw your cookie consent at any time via the "Cookie Settings" link in the footer.
Because SpotifyTracked does not collect personally identifiable information and analytics are anonymous, most of these rights are satisfied by default. If you accepted analytics cookies, you can withdraw consent at any time. If you have specific concerns, contact us at the email below.
Legal review notice: The legal basis and disclosure for session-scoped analytics, browser notifications, and other new browser storage are scheduled for review. Cookie-based persistent analytics and session replay remain tied to explicit consent.
11. Your Rights Under CCPA (California)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you certain rights regarding your personal information:
- Right to know - you can request disclosure of the categories and specific pieces of personal information collected about you.
- Right to delete - you can request deletion of personal information we have collected.
- Right to opt out of sale - you can direct us not to sell your personal information.
- Right to non-discrimination - we will not discriminate against you for exercising your CCPA rights.
We do not sell personal information. SpotifyTracked does not collect personally identifiable information, does not create consumer profiles, and does not share data with third parties for monetary consideration. Analytics data collected via PostHog is anonymous and used solely to improve the Service.
To exercise any of these rights, contact us at contact@spotifytracked.com. We will respond within the timeframes required by applicable law.
12. International Data Transfers
Analytics data collected by PostHog may be transferred to and processed in the United States. PostHog maintains appropriate data protection measures in accordance with applicable regulations.
13. Security
We implement security best practices including HTTPS enforcement, strict Content Security Policy headers, HTTP Strict Transport Security (HSTS), and other protective measures to safeguard the integrity of the Service and your connection to it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date. If we make material changes to how we handle data, we will reset cookie consent preferences so that you can review and re-consent under the updated policy. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.
15. Contact
If you have questions about this Privacy Policy or wish to exercise any of your data protection rights, you can reach us at contact@spotifytracked.com.