Privacy Policy

What we collect

We collect only what is needed to build your listening visualizations:

• Account identity from Google sign-in: your email, display name, profile picture URL, and Google account identifier.
• Your Spotify listening history: tracks, timestamps and play details, collected either live from the Spotify API or from the listening-history export (GDPR dump) you upload yourself.
• Spotify connection data: OAuth tokens and, on the bring-your-own-app path, your Spotify app credentials — all encrypted at rest.
• A technical session cookie that keeps you signed in, and a cookie that remembers your language.
• Privacy-friendly product analytics: aggregated usage events (which pages and features you use), collected first-party on our own servers, without cookies and without third-party trackers, used only to improve the service.
• If you subscribe to Leitmora Pro: your subscription status (plan, trial and renewal dates) and a Stripe customer/subscription identifier. Your card details are entered on Stripe and never reach our servers.

Why we process it, and our legal basis

We process your data solely to provide the service you asked for: collecting your listening history and rendering it as personal visualizations.

The legal basis is your consent and the performance of our service to you (GDPR Art. 6(1)(a) and (b)). We never sell your data, and we do not use your listening history for advertising or third-party profiling. Only where you opt in, we use advertising cookies to measure the performance of our own ad campaigns (Art. 6(1)(a)); see Cookies below.

Cookies

By default we use only essential cookies: a strictly-necessary session cookie to keep you authenticated, and a functional cookie that stores your chosen language. These do not require consent.

Our product analytics are self-hosted and cookieless: they run on our own servers, set no cookies, and share nothing with third parties.

Only if you consent, we additionally load advertising and measurement pixels from Meta and Google to understand how our ad campaigns perform (for example, that a visit led to a sign-up). These set third-party cookies and load only after you accept. If you decline, no advertising cookies are set. You can accept, decline, or withdraw your consent at any time via the “Cookie preferences” link in the footer.

Who we share data with

We use a small set of processors strictly to run the service:

• Google — sign-in / identity.
• Spotify — the source of your listening history and catalog metadata.
• Deezer — resolves 30-second audio previews; the audio is proxied through our server so your IP is not exposed to Deezer.
• Resend — sends the occasional transactional email (e.g. a reminder to upload your export).
• Stripe — payment processing for Leitmora Pro. Stripe acts as merchant of record: it handles your payment, stores your card details on its own systems (we never receive them), and is responsible for applicable VAT/sales tax.
• SigNoz — application monitoring (errors and performance), configured to scrub personal data.
• Meta and Google — only if you consent to advertising cookies: measurement of our own ad campaigns. You can decline or withdraw this at any time, after which these processors receive nothing.
• Hosting — our servers, located in EU (Contabo GmbH).

How long we keep it

We keep your data for as long as your account exists. Deleting your account permanently removes your profile, identities, listening history and connection data.

Uploaded history exports are processed and then deleted from temporary storage; a failed import may briefly retain the file so it can be retried.

Your rights

Under the GDPR you have the right to access, export (portability), correct, and delete your data, to withdraw consent, and to lodge a complaint with your local supervisory authority.

You can exercise the main rights yourself from the account menu: “Download my data” exports everything we hold, and “Delete account” erases it. For anything else, contact hello@leitmora.com.

Security

Access tokens and app credentials are encrypted at rest. Sessions are stored server-side; your browser only holds an opaque session identifier.

Changes

We may update this policy; the date above reflects the latest revision. Material changes will be communicated in the app.