Privacy

Soundkin (“we”, “us”) is operated as an independent project. Soundkin is not affiliated with, endorsed by, or operated on behalf of Spotify AB. “Spotify” is a trademark of Spotify AB. Contact: privacy@soundkin.app.

When you log in with Spotify, soundkin reads:

• Your Spotify user id and display name (scope: user-read-private).
• Your top 50 tracks and top 50 artists at the “medium term” (~6 months) time range (scope: user-top-read).

We do not read your email, your library, your playlists, your saved songs, your private listening, your payment status, or anything else.

You can revoke soundkin's access to your Spotify account at any time from spotify.com/account/apps.

From your top tracks, we compute a 7-number sound vector:

• Energy, valence, danceability, acousticness, instrumentalness, tempo, loudness.

These features come from Reccobeats, a third-party audio analysis service that takes Spotify track ids and returns per-track features. Soundkin sends Reccobeats the Spotify track ids of your top tracks and nothing else; Reccobeats does not learn your identity from us.

• Your Spotify display name.
• Your 7-number fingerprint (rendered as a chart).
• Your top 3 artists (as names linked to their Spotify pages).
• Your dominant genre label.
• The match score between you and them.

That is the complete list. We never expose your individual listening events, timestamps, track-level history, email, or anything tied to your real-world identity beyond what your Spotify display name reveals.

Soundkin uses cookies and localStorage for two purposes:

• Authentication. A session cookie from next-auth keeps you signed in between page loads. This cookie is essential — without it the product cannot work.
• Product analytics. We use PostHog to understand how the product is used (which pages convert, where users drop off, which share buttons get clicked). PostHog sets first-party cookies and stores a per-browser id in localStorage. We pass it your Spotify id so we can correlate events across pages; we do not give PostHog your Spotify listening data or your top artists.

We do not allow third-party advertising networks to place cookies on soundkin. Soundkin runs no ads.

• Your fingerprint record (display name, top artist + track ids, top genres, the 7-number vector) — stored in our database for as long as you have an account.
• Per-track audio features keyed by Spotify track id — cached across users to keep onboarding fast. Not associated with any single user once stored.

We aim to refresh stored Spotify-derived data periodically so it doesn't stale and so we're not warehousing Spotify metadata longer than operationally necessary.

One click. Sign in, open your fingerprint page, and use the “Delete my data” button. Your soundkin record is removed from our database within seconds and you are signed out.

If you can't sign in for some reason, email privacy@soundkin.app from the email tied to your Spotify account and we will delete your data within 5 days. Revoking soundkin's access at spotify.com/account/apps does not auto-delete your soundkin record on its own — please use one of the two paths above.

Soundkin shares data with three categories of third parties and no others:

• Spotify — when you click an artist or track link, your browser follows a link to open.spotify.com. Spotify's privacy policy applies on their site.
• Reccobeats — receives Spotify track ids (which are public identifiers) when we look up audio features. Receives nothing tied to your soundkin identity.
• PostHog — receives our product analytics events as described above.

We do not sell data to anyone, and we do not share data with ad networks, ad exchanges, data brokers, or any other party.

If you are in the EU, UK, California, or another jurisdiction with privacy rights legislation, you may have the right to access, correct, port, restrict, or delete the personal data we hold about you. Email privacy@soundkin.app and we will respond within 30 days. The fastest path to exercising your delete right is the in-product button described above.

Soundkin is not directed at children under 13 (or the local equivalent age of digital consent). We rely on Spotify's account age requirement; if we learn that a child has logged into soundkin, we will delete the associated record.

We may update this policy. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continuing to use soundkin after a change means you accept the new policy.

For privacy questions, deletion requests, or anything else: privacy@soundkin.app.