Privacy Policy

1. Who We Are

SpotDL ("we", "us", "our") operates the web application at spotidlmp3.online. This Privacy Policy applies to all users of the Service. SpotDL is not affiliated with Spotify AB.

2. Data We Collect

We collect the minimum data necessary to operate the Service:

2.1 Automatically Collected Data

When you access SpotDL, our servers and infrastructure may automatically record:

IP address — for rate limiting, abuse prevention, and server-side logging. Not linked to any personal profile.
Browser and device type — basic User-Agent string for compatibility diagnostics.
Request timestamps — to monitor service health and diagnose errors.
Referring URL — the page you visited before arriving at SpotDL, if any.

This data is collected in standard server access logs and is not linked to any account or persistent identifier.

2.2 User-Submitted Data

When you submit a download request, we temporarily process:

Spotify URL — the link you paste into the tool. Used solely to fulfill your download request.
Format and bitrate preferences — your selected audio output settings.
Job ID — a randomly generated identifier assigned to your download task, used to poll status and retrieve results.

2.3 Temporary File Storage

Processed audio files are temporarily stored in cloud object storage (Cloudflare R2) for retrieval. Files are associated with a Job ID only — no personal information is stored alongside them.

3. Data We Do Not Collect

SpotDL does not collect, store, or process any of the following:

Your name, email address, or any contact information
Account credentials or authentication tokens
Payment information of any kind
Spotify account data or credentials
Biometric data or location data
Persistent cross-session tracking identifiers
Social media profile data

4. How We Use Data

The data described in Section 2 is used exclusively for:

Fulfilling download requests — processing the URL you submit and returning the audio file.
Service operation and reliability — detecting errors, diagnosing crashes, and maintaining uptime.
Abuse prevention and rate limiting — preventing automated abuse, denial-of-service attempts, and policy violations.
Security monitoring — identifying and responding to unauthorized access attempts.

We do not use your data for advertising, profiling, analytics resale, or any purpose beyond direct operation of the Service.

5. Data Retention

5.1 Audio Files

Processed audio files are automatically deleted from our storage within 30 minutes of creation, or immediately after you download the file — whichever occurs first. Files are purged by an automated cleanup worker. We do not retain copies of downloaded audio.

5.2 Job Records

Download job records (Job ID, status, format, and Spotify URL) are retained in our task queue for up to 24 hours for troubleshooting purposes, after which they are automatically purged.

5.3 Server Logs

Standard server access logs (IP address, timestamps, request paths) are retained for up to 30 days for security and operational purposes, then automatically deleted. Logs are not used to build user profiles.

6. Third-Party Services

SpotDL uses the following third-party infrastructure to operate:

Provider	Purpose	Data Shared
Microsoft Azure	Backend compute (Container Apps)	Request data, IP address
Cloudflare R2	Temporary audio file storage	Processed audio files (auto-deleted)
Cloudflare Workers	Scheduled cleanup of expired files	Job IDs for file deletion
Vercel	Frontend hosting and CDN	IP address, request metadata

Each provider processes data only as required to deliver their infrastructure service. We do not authorize any provider to use your data for their own marketing or analytics purposes. Links to their privacy policies:

7. Cookies & Local Storage

SpotDL does not use cookies for tracking, advertising, or analytics. The Service does not set any persistent cookies.

Some infrastructure providers (Cloudflare, Vercel) may set technical cookies required for CDN operation, DDoS protection, and load balancing. These are strictly functional and do not track user behavior across sites.

The Service does not use browser Local Storage or Session Storage to persist any personal data.

8. Security

We implement reasonable technical and organizational measures to protect data processed through the Service, including:

HTTPS/TLS encryption for all data in transit between your browser and our servers.
TLS 1.3 encryption between backend services and object storage.
Automated expiry and deletion of all stored files and job records.
Rate limiting and abuse detection at the API layer.

No method of transmission or storage is 100% secure. While we take data protection seriously, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify affected users as required by applicable law.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information through the Service, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@spotidlmp3.online.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access — request a copy of personal data we hold about you.
Right to erasure — request deletion of your personal data.
Right to rectification — request correction of inaccurate data.
Right to restriction — request that we limit how we use your data.
Right to object — object to processing of your personal data.
Right to data portability — request your data in a portable format.

Because SpotDL collects no account data and no persistent identifiers, most requests can be fulfilled simply by ceasing to use the Service. For all other requests, contact us at privacy@spotidlmp3.online. We will respond within 30 days.

California Residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of sale. SpotDL does not sell personal information. For requests, email privacy@spotidlmp3.online.

EU/EEA Residents (GDPR): Our lawful basis for processing is legitimate interest (service operation) and compliance with legal obligations. You have the right to lodge a complaint with your local supervisory authority.

11. International Users

The Service is operated from servers that may be located in the United States and European Union. If you access SpotDL from outside these regions, your data may be transferred to and processed in jurisdictions with different data protection standards than your own.

By using the Service, you consent to such transfer and processing. We take reasonable steps to ensure that any such transfers are subject to appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through a visible notice on the Service homepage.

Your continued use of the Service after any update constitutes acceptance of the revised policy. If you do not agree with the changes, please discontinue use of the Service.

13. Contact

For privacy-related questions, requests, or concerns:

SpotDL — Privacy
Email: privacy@spotidlmp3.online

We aim to respond to all privacy requests within 30 days.