Privacy Policy

SpotiMP3 is built to need as little of your data as possible. You do not need an account to convert anything, and we do not sell your data to anyone, ever.

This policy explains what we collect, why, how long we keep it, and what rights you have. It applies to the SpotiMP3 website and services.

Information you give us:

• Links you paste: the URL you submit is processed so we can produce your file. We use it for that conversion and do not build a profile of your listening habits from it.
• Account details, only if you go Prime: an email address and authentication details, so your plan follows you across devices.
• Payment details: handled by our third-party payment processor. We never see or store your full card number.
• Anything you send us: if you contact us for support or to report a copyright issue, we keep that correspondence so we can respond.

Information collected automatically:

• Basic technical data such as browser type, device type, approximate region, and pages visited, used to keep the Service running and to understand roughly how it is used.
• Server logs, including IP address, which are generated automatically and used for security, abuse prevention, rate limiting, and diagnosing faults.

We do not knowingly collect special categories of personal data, and we ask that you do not send them to us.

We use the information we collect for the purposes below. Where the UK GDPR or EU GDPR applies to you, the legal basis for each purpose is noted alongside it.

• Provide the Service — process your conversion and deliver your file. Legal basis: performance of a contract.
• Operate paid plans — manage your subscription, payments and access. Legal basis: performance of a contract.
• Keep the Service secure — prevent abuse, fraud and automated scraping, and enforce rate limits. Legal basis: our legitimate interests.
• Improve the Service — understand aggregate usage so we know what to fix and build. Legal basis: our legitimate interests, or your consent where required.
• Support — respond to your questions and reports. Legal basis: our legitimate interests.
• Comply with the law — meet legal obligations and respond to valid legal requests. Legal basis: legal obligation.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing.

We use a small number of cookies and similar technologies. Strictly necessary cookies keep the Service working — for example remembering your session if you are signed in to a paid plan. These cannot be switched off without breaking the site.

We may also use privacy-conscious analytics to understand aggregate usage, such as which pages are visited and roughly where visitors come from. Where the law requires consent for non-essential analytics, we will ask for it first.

Most browsers let you block or delete cookies in their settings. Blocking essential cookies may stop parts of the Service working.

We rely on a small number of third parties to run the Service, such as hosting and infrastructure providers, a payment processor for paid plans, and analytics. These providers process data only on our instructions and only as needed to perform their function.

The Service also links to third-party websites we do not control. This policy does not cover them, and we are not responsible for their practices — please read their own privacy policies.

We keep personal data only as long as we need it for the purposes described in this policy.

• Links and conversion data: kept only as long as needed to complete the conversion and deliver your file, then removed in the ordinary course of operation.
• Server logs: retained for a short period for security and diagnostics, then deleted or aggregated.
• Account and billing records: kept for as long as your account is active, and afterwards only where we must for legal, tax or accounting reasons.

We use reasonable technical and organisational measures to protect your data, including encryption in transit and restricted access to systems.

No method of transmission or storage over the internet is completely secure, however, and we cannot guarantee absolute security. You use the Service at your own risk.

The Service is available worldwide, and your data may be processed in a country other than your own, including countries whose data-protection laws differ from those where you live.

Where we transfer personal data out of the UK or the European Economic Area, we take steps to ensure an appropriate level of protection, such as relying on adequacy decisions or standard contractual clauses.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data;
• object to, or ask us to restrict, certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent; and
• complain to your local data-protection authority.

To exercise any of these rights, contact us using the details below. We will respond within the time required by applicable law. Because most use of SpotiMP3 is anonymous, we may be unable to identify data relating to you if you have never created an account.

The Service is not directed at children, and we do not knowingly collect personal data from anyone under 16, or under the age of digital consent in their jurisdiction if higher.

If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page, and material changes will take effect when posted.

Your continued use of the Service after a change means you accept the updated policy.

If you have questions about this policy or how we handle your data, please contact us through the details provided on our website.