Wrapped season turns your year into a share card. The Privacy Policy at spotify.com/us/legal/privacy-policy is where Spotify describes what it collected to build that card, and what it can still do with the underlying listening graph after you post the screenshot.
This piece summarizes public Spotify language Clerica monitors. It is not a review of artist payouts, audio quality, or account security programs unless those topics appear in the policy itself.
What Spotify wants you to skim past
Spotify wants Wrapped to feel like a gift, not a disclosure event. The policy describes usage and listening information as the core asset: tracks and podcasts you stream, playlists, skips, searches, and recommendation interactions. That graph powers personalization, product improvement, and on ad-supported plans, advertising with measurement partners.
Social features (following friends, collaborative playlists, public profiles) can expose listening activity beyond your headphones. Settings can limit some surfaces; the underlying usage information still powers the service.
Third-party logins, voice assistants, and carrier bundles can pass identifiers and entitlement signals into your account. Premium removes some ad surfaces but not every analytics or research purpose described in the statement.
Export and deletion pathways exist in the policy and privacy portal. Deletion is bounded by legal retention, fraud prevention, and licensing obligations that outlive your cancel button. "Delete my account" and "erase every inference from my 2014 indie phase" are not the same request in retention language.
What the policy actually allows
Spotify AB and its affiliates describe collection across account registration, service use, payments, support, and marketing.
Account and contact data includes identifiers you provide (email, display name, date of birth where required, country) and credentials.
Usage and listening information ties to personalization, product improvement, and advertising on supported plans.
Device and technical data covers app version, operating system, IP-derived location, device identifiers, and network information for delivery, fraud prevention, and analytics.
Payment data flows through processors; billing relationships and transaction metadata remain in the commercial record even when full card numbers are not stored in all configurations.
Third-party and partner data arrives when you connect other platforms or bundled offers.
On ad-supported tiers, Spotify describes using listening history, device data, and inferred interests to serve and measure advertising, including partnerships with ad networks and measurement vendors. Supplemental U.S. and regional notices describe categories shared and opt-out mechanics where state law requires them.
Corporate transactions may include transfers of personal data as part of deals, with notice when required by law.
See the live policy on Clerica's Spotify tracker.
Scenario: Jordan's commute and the privacy download
Jordan listens to focus playlists on the subway, then switches to a podcast with location-aware ads on the free tier. Spotify's policy categories cover usage information for recommendations, device data for session integrity, and advertising partners on the ad-supported plan.
Jordan later requests a privacy download before switching services. The export arrives as structured files, but licensing logs and anti-fraud records may remain on Spotify's side under retention carve-outs Jordan never scrolled to on signup day. Wrapped marketing reused data Jordan already granted under the Privacy Policy; it was not a new consent screen.
What to put on your watchlist
For spotify.com diffs, prioritize:
- Advertising and tailored ad settings language, especially on free tiers and in U.S. state notices
- Sharing categories for business purposes and measurement vendors
- AI-related or automated recommendation disclosures as products evolve
- Social and public profile defaults
- Retention and deletion boundaries after account closure
- Corporate transaction language if ownership or catalog deals shift
Wrapped emails do not announce policy edits. Captures do. If you only read Spotify when year-end marketing arrives, you are reading the product's highlight reel, not the Privacy Policy diff that governs the listening graph underneath.
What you can do before Wrapped posts itself
- Read account privacy settings linked from the live policy, especially tailored ads and marketing communications.
- Request a copy of your data through Spotify's privacy portal if you want a baseline before a plan change.
- Tighten social and collaborative playlist settings if you want listening metadata less visible to other users.
- Add spotify.com to a Clerica watchlist so edits to sharing, advertising, or retention language arrive as diffs. Your Wrapped screenshot is not a substitute for reading those changes.
Questions readers ask
Does Spotify sell my listening history?
Spotify's U.S. notices describe categories shared for business purposes and provide opt-out mechanics where state law requires them. Read the live policy and regional supplements for definitions that apply to you.
Can I use Spotify without personalized ads on the free tier?
Product and policy layers interact. Check current plan features and the advertising sections for controls in your country.
What happens to playlists if I delete my account?
Deletion flows are described in the policy and help center. Collaborative playlists and social features may involve other users' copies of shared metadata.
Does Wrapped use data I thought was private?
Wrapped is built from usage information Spotify already processes under the Privacy Policy. It is marketing, not a separate consent moment.
Why monitor if I am not canceling?
Because advertising, sharing, and AI-related product disclosures change without a push notification labeled "your taste graph moved." Those edits on spotify.com rarely arrive with a push notification; a watchlist helps you compare months, not vibes.
The line between convenience and captivity is thin.
If you care about keeping your knowledge private, join us.
Spotify and its marks are trademarks of their respective owners. Clerica is not affiliated with or endorsed by Spotify. Clerica monitors publicly available privacy policies and terms for services you choose to follow. Clerica is not a law firm and does not provide legal advice.