Safiyah’s AppSFY·001
Connect →

SFY·002Side B · the fine print

Privacy, plainly.

This is a small app built for a handful of people, and this page is the whole policy: what it collects, where that lives, who else sees anything, and how to make all of it go away. It’s short because the truth is short.

Last updated · July 5, 2026

B1The short version

As little as the app can get away with

The app knows who you are on Spotify and how you’ve ranked your songs. That’s the collection, in full. There are no analytics, no ads, no trackers, and nothing is ever sold or shared with anyone. If you never connect Spotify, there’s nothing to collect — the demo crates live entirely in your browser.

B2Connecting Spotify

What connecting shares, and what gets kept

Connecting your Spotify account asks for permission to read your profile (including the email on it), read your library and playlists, control playback, and create playlists when you export a crate. That’s what the app can see. What it actually writes down is much smaller:

  • Your Spotify ID and display name — so your crates have an owner.
  • Your crates — the songs you’ve added, the flips you’ve called, and the order they produce.

That’s the whole ledger. Your email is never stored, and neither is anything about your listening beyond what you choose to rank.

B3Storage

Where it lives

  • Rankings live in the app’s database, under your account and nobody else’s.
  • Login state is a single encrypted cookie — unreadable to your browser or anyone else, and gone after six months, sooner if you log out.
  • On your machine, your browser keeps your theme choice and any demo crates you flip through while signed out. None of that ever leaves your device.

B4Third parties

Who else touches anything

  • Spotify handles login, your library, and playback under its own privacy policy.
  • Preview clips come from public music catalogs when Spotify won’t stream the full track. A clip streams to your browser straight from the catalog’s servers, which see what any media request shows them — an IP address and a browser type, not who you are.
  • Hosting — the servers that run the site keep the standard access logs every website has.

Nobody else. No analytics scripts, no ad pixels, no data brokers, no “partners.”

B5Your controls

Making it go away

  • Log out and the login cookie is deleted on the spot.
  • Revoke the app at spotify.com/account/apps and Spotify cuts off its access entirely.
  • Delete your account from the bottom of your shelf. It wipes your account and every crate under it from the database on the spot — no email, no waiting period, no copy kept.

B6Terms of service

The terms, in one breath

The app is a hobby project provided as‑is, with no warranty of any kind. It tries hard not to lose your rankings — but if losing a crate would sting, export it back to Spotify as a playlist. That’s the entire terms of service.

Questions · ask Ahmad · SFY·002