Privacy Policy for Spicy Lyrics

1. Introduction

This Privacy Policy explains how Spicy Lyrics Extension ("we," "our," or "Extension") collects, uses, and protects your information when you use our Extension. We respect your privacy and are committed to protecting your personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect

Spotify User Data

Through our websocket connection, we collect only the following limited Spotify user data:

  • Display name: Your Spotify display name
  • Followers information: Your follower count and related public information
  • Spotify identifiers: Technical identifiers such as href, id, and uri
  • Profile images: Your public Spotify profile pictures
  • Product type: Your Spotify subscription status (free, premium, etc.)
  • Account type: Technical account categorization

In addition, we maintain a count of all connected users for analytical purposes.

PostHog Analytics Data

We also use PostHog, an open-source analytics platform, to collect usage data about our extension. This includes:

  • Usage patterns: How you interact with our extension
  • Technical information: Your device type, operating system, and browser
  • IP address: Used to approximate your location (country/region level only)
  • Performance metrics: How the extension functions on your device
  • Feature usage: Which features of the extension you use

PostHog data is used to improve the extension, identify bugs, and enhance user experience. This data is processed in accordance with PostHog's privacy practices and our data protection commitments.

We do not collect sensitive personal information such as:

  • Birthdate
  • Email address
  • Country
  • Explicit content preferences
  • Account policies
  • Or any other data not specifically listed above

By installing the Spicy Lyrics Extension from the Spicetify marketplace, you grant us permission to access this specific subset of your Spotify user data and to collect analytics data as described above.

3. How We Use Information

We use the collected information for:

  • Real-time analytics: To see how many people are using the extension in real-time
  • Abuse prevention: To view basic information on who's using the extension to prevent service abuse
  • Public metrics: The active user count is PUBLICLY displayed on our public homepage (https://spicylyrics.org)
  • Private administration: Actual user data and any identifying information about users is ONLY visible PRIVATELY to the Admins of Spicy Lyrics
  • Product improvement: PostHog analytics data helps us understand how our extension is used and how we can improve it
  • Bug tracking: To identify and fix issues in the extension

We do not use your data for marketing purposes or sell it to third parties.

4. Data Storage and Security

All collected data is stored securely on a private Redis database with appropriate technical and organizational security measures in place. Access to this data is restricted to authorized Spicy Lyrics administrators only. PostHog analytics data is stored on PostHog's secure servers. We implement reasonable security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

5. Data Sharing

We do not sell, trade, or otherwise transfer your information to outside parties. Your data may only be accessed by Spicy Lyrics administrators for the purposes outlined in this Privacy Policy. Usage data collected by PostHog is only used for our internal analytics purposes.

6. Data Retention

Your Spotify user data is retained only for the duration of your websocket connection. Once you disconnect from our Extension, your session data is promptly deleted from our active systems. All user data is revalidated every 30 seconds while connected. PostHog analytics data may be retained for longer periods to allow for comprehensive product improvement analysis. Aggregated, anonymized data may be retained for analytical purposes.

7. Your Rights

As a user based in the European Union, you have rights regarding your personal data, including:

  • The right to access data we hold about you
  • The right to request deletion of your data
  • The right to object to processing of your data
  • The right to data portability
  • The right to withdraw consent

To exercise these rights, please contact us using the information provided in the Contact section.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date shown at the bottom of the policy. We encourage you to periodically review this Privacy Policy to stay informed about our data practices.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: spikerko@spikerko.org

Last Updated: 02/27/2025