Privacy Policy
Last updated February 2026. Short, because there is not much to describe.
The summary
SpotiDown has no accounts, sets no advertising or tracking cookies, loads no third-party scripts, and does not sell or share data with anyone. Links you paste are used to complete your conversion and are not retained in logs we keep. Converted files are deleted within one hour.
Everything below is the detail behind that summary.
What is collected
Content you submit. The Spotify link you paste is sent to the conversion service, used to resolve metadata and produce audio, and discarded when the job ends. It is not written to a retained log and is not associated with you.
Technical request data. Our servers record standard web-server entries: IP address, timestamp, requested path, user agent and response status. These exist to keep the service running and to stop abuse. They are retained for 14 days and then deleted.
Local browser storage. One item, `sd-theme`, remembers whether you chose light or dark. It stays in your browser, is never transmitted, and clearing site data removes it.
What is not collected
No accounts or profiles. No advertising cookies or identifiers. No analytics or session-recording scripts. No social media pixels. No sale or sharing of data with third parties. No download history tied to any visitor. No email address unless you write to us yourself.
Third parties
Two external services are involved in normal use. Google Fonts serves one typeface, which means your browser makes a request to fonts.gstatic.com. No cookie is set by that request. Our CDN and hosting provider processes requests on our behalf as a data processor and is bound by its own terms.
That is the complete list. There are no ad networks, no tag managers and no embedded widgets anywhere on the site.
Your rights
Under the GDPR, the UK GDPR and similar laws you may request access to, correction of, or deletion of personal data we hold about you. In practice we hold almost none, and 14 day server logs are the only category likely to contain anything. Requests go to [email protected] and are answered within 30 days.
The lawful basis for processing request logs is legitimate interest in operating and securing the service. The lawful basis for processing a link you submit is performance of the service you asked for.
Children
This service is not directed at children under 13, and we knowingly collect nothing from them. Since no accounts exist, no age information is gathered at all.
Changes
Material changes will be reflected in the date at the top of this page. Because there is no mailing list, this page is the notice. If the site ever adopts analytics or advertising, it will be stated here before it goes live, not after.