Back to Home

Privacy Policy

Last updated: October 7, 2026

1. Introduction

This Privacy Policy explains how TracklistFinder collects, uses, and protects personal data when you use our website and related features. It also explains your choices about analytics cookies and your privacy rights.

2. Information We Collect

2.1 Information You Provide Directly

  • Account details, including your email address and encrypted password, if you create an account
  • YouTube URLs, video IDs, playlist titles, and track data you submit or generate through the service
  • Developer contact details you choose to send to [email protected]
  • Subscription and billing-related information needed to start or manage a paid plan
  • Your optional product-email choice, including when and where you opted in or unsubscribed

2.2 Automatically Collected Information

  • Essential session identifiers used to keep you signed in and protect the site
  • Your cookie consent preference stored in your browser
  • Basic request and device information such as IP address, browser type, and approximate usage timing from server logs
  • Usage analytics and ads conversion measurement only if you explicitly accept analytics cookies
  • A random browser consent identifier and timestamped record of your separate analytics and ads choices

3. How We Use Personal Data

We use personal data to:

  • Provide the tracklist extraction, playlist creation, account, dashboard, and subscription features
  • Authenticate users, maintain sessions, and secure the service against abuse
  • Process payments and manage subscription status
  • Operate embedded YouTube and Spotify content requested by users
  • Understand aggregate product usage and paid campaign performance when consent is given
  • Send occasional product tips only if you opt in; you can unsubscribe at any time without losing account features or requested notifications
  • Comply with legal obligations and enforce our Terms of Service

4. Cookies and Tracking Technologies

We use a limited set of cookies and browser storage technologies.

4.1 Essential Storage

  • Session cookie: keeps users signed in and supports core account security.
  • Consent preference storage: remembers separate analytics and ads measurement choices for up to two years.
  • Like cookie: set only when you like a track, holding a random token so that browser's like counts once and can be undone. It is not linked to an account and is not used for analytics or advertising.
  • Consent record: an encrypted random browser token is used to record the selected purposes and time, without storing your IP address; these records are deleted after two years.

These items are necessary for the service to work properly and are not used for advertising.

4.2 Analytics and Ads Measurement

We use Umami analytics to measure aggregate website usage, such as page visits and product interactions. We may also use Google Ads conversion measurement to understand whether paid ads lead to product actions, such as successful tracklist or Spotify playlist creation. The banner offers separate, unchecked choices for these purposes. Each tool loads only after you actively opt in to that purpose.

If you choose Essential only, neither tool loads. You can change either choice at any time using the Cookie settings control in the footer. Your latest choices and purpose version are recorded with a random browser identifier for up to two years so we can verify consent; no IP address is stored in that record.

5. Legal Bases for Processing

  • Contract: to provide the service you request, including playlist generation, account access, and subscription features.
  • Legitimate interests: to secure, maintain, troubleshoot, and improve the service in a proportionate way.
  • Consent: separately for non-essential analytics through Umami and ads measurement through Google Ads.
  • Consent: for optional product tips and updates, recorded on your account when you tick the unchecked signup box or enable it in account settings.
  • Legal obligation: where we must retain or disclose information to comply with applicable law.

6. Third-Party Services and Recipients

We use third-party providers to operate the service. Depending on your usage, these may include:

  • Stripe: to create checkout sessions, process payments, and manage subscriptions.
  • Spotify: to create playlists and search for matching tracks when you use Spotify-related features.
  • YouTube and youtube-nocookie.com: to access video information and display requested embeds.
  • Umami: to process analytics data when you opt in to analytics cookies.
  • Google Ads: to process conversion measurement when you opt in to analytics cookies.
  • SMTP2GO: to deliver account emails and optional product tips that you requested.
  • Infrastructure and hosting providers: to host the application, database, logs, and background jobs.

We do not sell your personal data.

7. Data Retention

We keep personal data for as long as it is reasonably necessary to operate the service, maintain account history, comply with legal obligations, resolve disputes, and enforce agreements.

  • Account and subscription records are generally retained while your account remains active and for a reasonable period afterward.
  • Generated playlist and tracklist records may remain available to support the product history and shared playlist pages.
  • Consent preferences remain in your browser for up to two years or until you clear or change them; the corresponding verification record is deleted after two years.
  • Product email consent and withdrawal timestamps remain with your account so we can respect your choice; if you unsubscribe, we stop the optional sequence.
  • Analytics data retention is governed by the Umami configuration in use at the time of collection.

8. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, as well as rights to data portability and to withdraw consent for analytics at any time.

To exercise these rights or make a privacy-related request, contact us at [email protected]. We may need to verify your identity before completing certain requests.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.

9. International Transfers

Some of our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards or provider commitments for cross-border transfers.

10. Security

We use reasonable technical and organizational measures to protect personal data, including access controls, secure transport, and authenticated account sessions. No method of transmission or storage is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the service, providers, or legal requirements. The date at the top of this page shows the latest revision. Where required, we will seek fresh consent before using new non-essential trackers or materially changing analytics purposes.

12. Cookie Settings

You can reopen the cookie banner and change your analytics and ads measurement choices at any time. You can also change optional product-email preferences in your account or use the unsubscribe link in each product tips email.