Privacy Policy

What Spotichord stores

When you connect Spotify, Spotichord processes your Spotify account ID, display name, playlist metadata, tracks and playback state. Spotichord stores the songs, chords, lyrics, playlist preferences and settings that you add to your personal songbook.

Spotify access

Spotify authorizes Spotichord using OAuth. Spotichord never receives your Spotify password. The refresh token stays in an encrypted, HTTP-only session cookie. A short-lived access token is provided to the browser in memory only and is used for the Spotify features you request.

Why data is processed

• To show your Spotify playlists and tracks.
• To control playback and manage your queue when requested.
• To save and synchronize your personal chords and songbook.
• To maintain the security and reliability of the service.

Service providers

Spotichord uses Spotify for music data and playback, Google Firebase for personal songbook storage, and Vercel for application hosting. Those providers process data under their own terms and privacy policies. Spotichord does not sell your personal data.

Retention and deletion

Disconnecting Spotify ends the local session but keeps your saved Spotichord data so it is available next time. You can permanently remove your saved songs, chords and preferences with Delete data in the Spotify account area of the sidebar.

Your choices

You can revoke Spotichord's Spotify access from your Spotify account, disconnect inside Spotichord, or delete your Spotichord data. For privacy questions, contact privacy@knegus.com.