Privacy Policy

This policy explains what SpotiCatch (the website, the desktop app and spoticatch.net) collects, why, and the choices you have. We collect only what we need to run the service, and we never sell your information.

What we collect

• Account details. If you create an account: your email address and your password, which we store only as a one-way hash. We also send 6-digit codes to your email to confirm sign-ups and password resets.
• Sign in with Google. If you sign in with Google, we receive your Google account's email address, name and account ID. We use them only to create and identify your SpotiCatch account. We get no access to your Gmail, contacts, files or anything else in your Google account.
• Signed-in devices. The device type, browser and last activity of each signed-in device, so you can see your devices and sign them out in Account settings.
• Downloads. The Spotify links you convert, the track titles, the quality and the time, used for daily limits and to keep the service working.
• Payments. When you support us on Ko-fi, Ko-fi tells us the email address and amount so we can add Plus to your account. Card and PayPal details stay with Ko-fi and its payment providers; we never see them.
• Technical data. Your IP address and browser details when you use the service, to apply rate limits and stop abuse.
• Analytics. We use our own self-hosted Umami to count visits (pages, country, device type). It uses no cookies and doesn't identify you.
• Error reports. When something breaks, technical details about the error are sent to Sentry so we can fix it.

How we use it

To provide the service and your account, apply daily limits, add Plus after a payment, send sign-in codes and important account emails, keep the service secure, and understand which parts of SpotiCatch are used. We don't use your information for advertising profiles and we don't sell, rent or trade it.

Google user data

Data we receive through Sign in with Google (email, name, account ID) is used only to sign you in and to identify your account. It isn't shared with anyone, isn't used for advertising, and isn't transferred to others except where needed to run the service or required by law. You can remove SpotiCatch's access at any time in your Google Account's security settings, and delete your SpotiCatch account as described below.

Who we share it with

Only the services we need to run SpotiCatch, each for its own part:

• our server host, which stores the service's data;
• Resend, which delivers our emails (sign-in codes, account notices);
• Ko-fi and its payment providers, for donations;
• Cloudflare, for domain and network security;
• Sentry, for error reports.

We may also disclose information if the law requires it.

How long we keep it and deleting your account

We keep your account information while your account exists. You can delete your account at any time in Account settings, which removes your account and signs you out everywhere. Records of payments may be kept as long as accounting rules require. Rate-limit and technical data is kept only briefly.

Security

Connections to SpotiCatch are encrypted, passwords are stored only as hashes, and access to our systems is limited to the people who run the service.

Children

SpotiCatch isn't meant for children under 13, and we don't knowingly collect their information.

Changes to this policy

When this policy changes, we update the date at the top of this page. Important changes to how we use your information will be announced on the site or by email.

Contact

Questions about your data, or a request to see or delete it: reach us on our Discord.