A narrow purpose, stated plainly.

Echo accesses your Spotify profile, recently played history, and private playlist data solely to create and update your private playlist archive.

Access and refresh credentials, the playlist association, sync cursor, and seen track URIs are stored on this deployment until you disconnect.

An encrypted essential cookie stores only a local user identifier, session generation, browser binding, and CSRF value. It expires within seven days.

Echo does not sell or share this data.

Disconnect immediately deletes the local account, playlist association, and all retained Spotify data. A non-reversible keyed safety fence blocks an already-started callback for 14 minutes 30 seconds, then becomes inactive within 15 minutes. Best-effort maintenance normally deletes that row on its next 30-second pass, but process or database downtime can delay physical deletion.

The remote playlist is retained in your Spotify account and is not deleted or edited by disconnect. Because Echo deletes the association, a later reconnect creates a new Echo playlist instead of reusing the retained one.

Questions or deletion concerns: hello@b-raffetseder.com.

Return to Echo