Privacy & your data
What we record, what fans consent to, and how to get everything out or delete it.
The cookie banner#
Visitors in the UK, the EEA and Switzerland see a banner before anything non-essential runs. Nothing beyond what the page needs to work loads until they choose. Elsewhere, analytics and pixels are on by default and can be switched off from the footer at any time.
Declining does not blank your stats. Views and clicks are still counted, they just are not tied to a returning visitor. Totals, countries and referrers keep working. What stops is the ad pixel and the visitor cookie.
What we record about fans#
| Data | Why |
|---|---|
| Page views and clicks | Your analytics. No account or identity attached. |
| Approximate location | Country, and city where available. Derived from the connection, never precise. |
| Device, system and browser | So you know how fans are actually reading your pages. |
| Referrer and campaign tags | So you can tell which channel worked. |
| Tap positions | For heatmaps. Positions only, with no visitor id and no session recording. |
| Email addresses | Only when a fan types one in, or approves sharing it during a pre-save. |
What fans can do themselves#
Fans do not have to come through you. A pre-save confirmation carries a disconnect link that removes the pending save and their data. A gate unlock carries a remove-my-data link. Both work without an account and take effect immediately.
They can also remove our access from their Spotify or Google account settings, which stops anything further on our side.
Your own data#
On Account you can download everything we hold about you as a JSON file, and delete your account outright. Deleting removes your links, pages, fans and statistics, and takes your public pages offline. It cannot be undone, so export first if you want a copy.
Where platform rules apply#
Data obtained from Spotify is treated more carefully than data fans give us directly. An email that came from a pre-save is never passed to an advertising platform and is not synced to your email tool, because Spotify's developer terms do not allow it. Addresses typed into our own forms carry no such restriction.
The full privacy policy and cookie policy have the formal detail.