Privacy Policy
Last Updated: October 27, 2025
1. Information We Collect
Twitch Spotify Song Requests ("we", "our", or "us") collects the following information:
- Spotify Account Information: Your Spotify user ID, display name, email address, and profile image when you authenticate via Spotify OAuth.
- Playback Data: Current playback state, track information, and queue modifications to enable song request functionality.
- Song Request Data: Twitch usernames (from StreamElements), song requests, and request history.
- Usage Data: Request statistics, top requesters, and success/failure rates for analytics purposes.
2. How We Use Your Information
We use the collected information to:
- Authenticate you with Spotify and maintain your session
- Add requested songs to your Spotify queue
- Display currently playing music in OBS widgets and your dashboard
- Show song request history and statistics
- Provide skip and playback control functionality
- Improve our service and fix bugs
3. Data Storage and Security
Your data is stored securely on our servers located in the United States. We implement industry-standard security measures including:
- HTTPS encryption for all communications
- OAuth 2.0 secure authentication
- Encrypted storage of Spotify access tokens
- Automatic token refresh for security
- Secure database with password protection
We store:
- Spotify access and refresh tokens (encrypted and automatically refreshed)
- Song request history with requester usernames
- User profile information from Spotify
- Dashboard preferences and settings
4. Data Sharing and Third Parties
We do NOT sell, trade, or share your personal information with third parties for marketing purposes. We only share data with:
- Spotify: To authenticate and interact with your Spotify account via their official Web API. We comply with Spotify's Developer Terms of Service.
- StreamElements: To receive song requests from your Twitch chat commands. Only public Twitch usernames are shared.
We do not access or store your Spotify playlists, listening history (beyond current playback), or any other data not explicitly required for our service.
5. Data Retention
We retain your data as long as your account is active or as needed to provide services. You may request account deletion at any time, which will result in:
- Permanent deletion of your user account
- Removal of all stored tokens and credentials
- Deletion of song request history associated with your account
- Anonymization of requester usernames in historical data (if applicable)
6. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of all personal data we store about you
- Rectification: Update or correct your information
- Deletion: Request deletion of your account and all associated data
- Portability: Receive your data in a machine-readable format
- Revocation: Revoke Spotify access at any time via your Spotify account settings at spotify.com/account
- Objection: Object to data processing for specific purposes
7. Cookies and Tracking
We use essential session cookies to maintain your login state. We do NOT use:
- Third-party advertising cookies
- Analytics tracking (Google Analytics, etc.)
- Social media pixels
8. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
9. International Data Transfers
Your data may be transferred to and stored on servers located in the United States. By using our service, you consent to this transfer. We ensure adequate safeguards are in place to protect your data.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date and posting a notice on our website. Continued use after changes constitutes acceptance.
11. Contact Us
For privacy-related questions, data requests, or concerns, please contact us at:
Email: privacy@personx.online
Website: https://spotify.personx.online
We will respond to all requests within 30 days.