Privacy Policy
We believe privacy should be simple. This policy explains exactly what information we collect, why we collect it, and how it stays protected — in plain language.
Overview
Welcome to SaveMyTracks ("we," "us," or "our"), accessible at savemytracks.com. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website and use our Spotify track downloading service (the "Service").
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service. This policy applies to all visitors, users, and others who access the Service.
SaveMyTracks is an independent service and is not affiliated with, endorsed by, or sponsored by Spotify AB. We do not use the Spotify API on behalf of users, and we do not access your Spotify account credentials or personal account data at any time.
Jurisdiction note: This policy is governed under applicable international privacy law. If you are a resident of the European Union, your rights are additionally governed by the General Data Protection Regulation (GDPR). If you are a California resident, the California Consumer Privacy Act (CCPA) also applies.
Information We Collect
We collect two categories of information: information you provide to us directly, and information collected automatically when you use the Service.
2.1 Information You Provide
SaveMyTracks does not require registration or account creation. We do not collect your name, email address, or any other personally identifying information unless you voluntarily contact us. If you reach out via email or a contact form, we collect:
- Your name and email address (used solely to respond to your inquiry)
- The content of your message
- Any attachments or screenshots you choose to share
2.2 Information Collected Automatically
When you use the Service, our servers and third-party analytics tools may automatically record the following technical data:
| Data Type | What It Includes | Purpose |
|---|---|---|
| IP Address | Your internet protocol address | Abuse prevention, rate limiting, regional compliance |
| Browser & Device | Browser type/version, OS, screen resolution, device type | Compatibility and performance optimization |
| Usage Data | Pages visited, time on page, clicks, referring URL | Service analytics and improvement |
| Request Logs | Date/time of requests, server response codes | Error monitoring, security, and debugging |
| Cookies | Session tokens, preference identifiers | Session management and analytics (see Section 4) |
2.3 Spotify Links & Content
When you paste a Spotify URL into our converter, that URL is processed transiently on our servers to retrieve and convert the audio file. We do not store, log, or retain Spotify URLs you submit beyond the time needed to complete the conversion request. Converted files are temporarily cached on our servers for up to 30 minutes to allow your download to complete, after which they are permanently deleted.
How We Use Information
We use the information we collect strictly for the following purposes:
- Service Delivery: To process your download requests and return converted audio files.
- Performance & Reliability: To monitor server health, diagnose technical issues, and maintain uptime.
- Security & Abuse Prevention: To detect, investigate, and prevent fraudulent activity, excessive automated requests (bot traffic), and unauthorized access.
- Analytics: To understand aggregate usage patterns and improve the Service's features and interface.
- Legal Compliance: To respond to valid legal requests, court orders, or regulatory requirements.
- Support: To respond to inquiries, bug reports, or DMCA notices you submit to us.
We do not use your data for targeted advertising, profiling, or to build individual user profiles. We do not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to provide and improve the Service. A cookie is a small text file stored on your device by your browser.
4.1 Types of Cookies We Use
- Essential Cookies: Required for the Service to function. These cannot be disabled. They manage session state, CSRF protection, and rate limiting.
- Analytics Cookies: Set by Google Analytics to collect aggregated, anonymized data about traffic and usage. These cookies help us understand which features are used most. IP addresses collected via Google Analytics are anonymized before storage.
- Advertising Cookies: If advertising is served on the site, ad partners (such as Google AdSense) may set cookies to serve relevant ads. These partners have their own privacy policies. You may opt out via aboutads.info.
- Preference Cookies: Remember your preferences, such as interface language or consent banner responses.
4.2 Managing Cookies
You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling certain cookies may affect the functionality of the Service. For detailed instructions, consult your browser's help documentation.
We also honor the Do Not Track (DNT) browser signal. When DNT is enabled, we disable non-essential tracking and analytics.
Third-Party Services
We integrate with the following third-party services to operate the Service. Each service has its own privacy policy that governs how your data is handled by them:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Analytics | Website analytics and traffic measurement | Anonymized IP, usage behavior, device info |
| Cloudflare | CDN, DDoS protection, performance | IP address, request metadata |
| Google AdSense | Ad delivery (if applicable) | Cookies, IP address, browsing context |
| Hosting Provider | Server infrastructure and file storage | Server access logs, request data |
We do not control the data collection practices of these third parties and recommend reviewing their respective privacy policies. We select partners with strong privacy commitments and process data agreements (DPAs) where required by law.
Data Sharing & Disclosure
We do not sell, trade, or rent your personal information. We may share limited data only in the following circumstances:
- Service Providers: With trusted vendors who perform functions on our behalf (e.g., hosting, analytics), under strict data processing agreements that prohibit them from using your data for their own purposes.
- Legal Requirements: When required to do so by law, court order, subpoena, or other valid legal process issued by a competent authority.
- Rights Protection: When we believe disclosure is necessary to protect the rights, property, or safety of SaveMyTracks, our users, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you prior to such a transfer and provide an opportunity to opt out.
- Consent: With your explicit prior consent for any other purpose not described in this policy.
Data Retention
We retain data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Converted audio files | Deleted within 30 minutes of generation |
| Spotify URLs submitted | Not retained; processed transiently only |
| Server access logs (IP, request) | Up to 30 days, then deleted |
| Analytics data | Up to 26 months (aggregated, anonymized) |
| Support emails | Up to 12 months after resolution |
| DMCA & legal correspondence | Up to 7 years (legal compliance requirement) |
Security
We implement commercially reasonable technical and organizational security measures to protect the information we collect from unauthorized access, disclosure, alteration, or destruction. These measures include:
- HTTPS/TLS Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
- DDoS Protection: We use Cloudflare to protect against volumetric attacks and unauthorized automated requests.
- Access Controls: Server access is restricted to authorized personnel only, using multi-factor authentication and least-privilege principles.
- Temporary File Isolation: Converted audio files are stored in isolated temporary directories and automatically purged after 30 minutes.
- Rate Limiting: We enforce rate limits on all conversion endpoints to prevent abuse and protect server resources.
Important: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You use the Service at your own risk.
Your Privacy Rights
Depending on your location, you may have specific rights regarding your personal data. We are committed to honoring these rights regardless of your jurisdiction.
9.1 Rights for All Users
- Right to Know: You can request information about what personal data we hold about you.
- Right to Delete: You can request that we delete personal data we hold about you, subject to certain exceptions.
- Right to Opt Out: You can opt out of non-essential cookies and analytics tracking at any time via your browser settings or our cookie preferences.
9.2 GDPR Rights (EU/EEA/UK Residents)
- Right of Access (Art. 15): Obtain a copy of your personal data and supplementary information.
- Right to Rectification (Art. 16): Have inaccurate personal data corrected without undue delay.
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to Restriction (Art. 18): Request restricted processing of your personal data under certain circumstances.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Our legal basis for processing data is: legitimate interests (service security, abuse prevention, analytics) and consent (non-essential cookies). You have the right to lodge a complaint with your local Data Protection Authority (DPA).
9.3 CCPA Rights (California Residents)
- Right to Know: Know what personal information is collected, used, shared, or sold.
- Right to Delete: Request deletion of personal information collected from you.
- Right to Opt-Out of Sale: We do not sell personal information. However, you may still submit an opt-out preference by contacting us.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving a verifiable request.
Children's Privacy
The Service is not directed to individuals under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately at [email protected].
If we become aware that we have inadvertently collected personal data from a child under the applicable age of consent, we will take immediate steps to delete that information from our servers.
Parents & Guardians: Use of this Service by minors should be supervised. We encourage parents to monitor their children's online activities and to educate them about safe internet use.
DMCA & Copyright Notice
SaveMyTracks respects intellectual property rights. We comply with the Digital Millennium Copyright Act (DMCA) and respond promptly to valid takedown notices. Our Service is intended for personal, non-commercial use only.
11.1 Intended Use
This Service is designed exclusively for users to download music they have the legal right to access — such as tracks available in their region under a valid Spotify subscription — for personal offline playback. Redistribution, resale, or public sharing of downloaded audio files is strictly prohibited and may violate applicable copyright law.
11.2 DMCA Takedown Requests
If you are a copyright owner or authorized agent and believe content on our platform infringes your copyright, you may submit a DMCA takedown notice to our designated agent. Your notice must include:
- An electronic or physical signature of the person authorized to act on behalf of the copyright owner
- A description of the copyrighted work you claim has been infringed
- A description of where the infringing material is located on our Service
- Your contact information (address, phone number, and email)
- A statement that you have a good-faith belief that the use is not authorized by the copyright owner, its agent, or law
- A statement made under penalty of perjury that the information in your notice is accurate
Send DMCA notices to: [email protected]. We will respond to valid notices within 5–10 business days.
11.3 Repeat Infringer Policy
In accordance with the DMCA, we maintain a policy of terminating, in appropriate circumstances, the access of users who are determined to be repeat infringers. We may, at our sole discretion, limit or block access from IP addresses associated with repeated abuse.
Disclaimer
SaveMyTracks is an independent third-party tool and is not affiliated with, endorsed by, or in any way officially connected to Spotify AB or any of its subsidiaries or affiliates. The Spotify name, trademark, and related intellectual property are the property of Spotify AB.
The Service is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.
We do not guarantee that the Service will be uninterrupted, error-free, or free of viruses or other harmful components. You use the Service entirely at your own risk. SaveMyTracks shall not be held liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from your use of, or inability to use, the Service.
User Responsibility: You are solely responsible for ensuring that your use of this Service complies with the laws of your country and with Spotify's Terms of Service. SaveMyTracks does not condone copyright infringement and accepts no liability for misuse of the Service by its users.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post a prominent notice on our website for 30 days following the change
- Where required by law, seek renewed consent from users for material changes that affect how we use personal data
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with a revised policy, you must stop using the Service.
Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or need to submit a DMCA notice, please reach out to us. We handle all enquiries — privacy, DMCA, technical support — through one inbox. We aim to respond within 5 business days.