Privacy Policy

Account data. When you register, we store your email address, display name, and a hashed password. Your email is used only for account functions (verification, password reset) and emails you opt into.

Listening history. If you import your Spotify Extended Streaming History, we store timestamps, milliseconds played, track URIs, and a skipped flag. We never store your IP address, device, platform, or country from this file. The raw file never leaves your browser.

Last.fm data. If you connect a Last.fm account, we sync your public scrobble history to power your personal stats. We store your Last.fm username and public playcount.

Session data. We store an opaque session token in our database (linked to your account) to keep you logged in. This is delivered as an HttpOnly cookie named swiftie_session.

• IP addresses or location data
• Device identifiers or browser fingerprints
• Analytics or advertising tracking
• Payment information (we have no paid features)
• Data from minors - this service is not directed at children under 13

We use a single cookie:

We set no analytics, advertising, or third-party cookies.

• To display your personal listening stats and leaderboard position
• To send emails you have opted into (digests, milestone alerts)
• To verify your email address and reset your password
• To match your listening history against Taylor Swift's catalog

We never sell, rent, or share your personal data with third parties for marketing purposes.

All marketing and digest emails are opt-in and off by default. You can change your preferences at any time from your account settings. Every email includes a one-click unsubscribe link.

Your account data is retained as long as your account exists. You can request deletion by emailing us at [email protected]. We will delete your account and all associated personal data within 30 days.

Aggregated, anonymized listening data (used to compute site-wide stats) may be retained after deletion.

SwiftieStats uses the following external services:

• Spotify - streaming data is scraped from public Spotify pages. We also offer optional OAuth to sync your recent plays.
• Last.fm - optional integration to sync your public scrobble history.
• Mailgun - used to send transactional emails. Your email address is transmitted to Mailgun only when sending you an email.

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, or to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected].

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of SwiftieStats after a change constitutes acceptance of the updated policy.

Questions or concerns? Email us at [email protected].