Privacy

We hold your email address, a read-only copy of your streaming library’s metadata, and what you have done inside Music Keeper. We never hold audio files. We do not sell anything, we run no advertising, we have no trackers, and we do not use your data to train anything.

• Your email address, once you have proven it with a one-time code. This is your account.
• Your Spotify display name and user id, and the country your account is set to, which decides which regional storefront we link you at.
• Track metadata for your saved tracks and playlists: title, artist, album, release year, duration, ISRC, and the Spotify track id. Never audio.
• Your playlist names and which tracks are in them.
• What Music Keeper worked out: which recording each track matched, how confident that match was, and which tracks we could not identify.
• What you did here: what is in your crate, what you asked to be watched, and which shops you opened for which tracks.

• Passwords. There is no password field anywhere in Music Keeper, and there never will be. Signing in is a six-digit code sent to your email.
• Your Spotify password. We never see it. You sign in on Spotify's own site and Spotify tells us only that you approved access.
• Payment details. We take no money, so we have nothing to charge and nowhere to put a card number.
• Audio files, from anywhere, at any point, for any reason.
• Your listening history or what you are currently playing. We do not request those permissions.

Three read-only permissions and nothing else: user-library-read, playlist-read-private and playlist-read-collaborative. We cannot play, pause, change, create, delete or follow anything, and we cannot read your listening history. You can revoke our access at any time from your Spotify account settings, and doing so does not delete your Music Keeper account.

Spotify gives us a refresh token so the sync can keep running after you close the tab. It is encrypted with AES-256-GCM before it is stored, so a copy of the database on its own is not enough to use it.

Four services, each doing one job, none of them given more than that job needs:

• Spotify, which we read your library from.
• MusicBrainz, the open music encyclopedia we identify recordings against. It receives track titles and artist names, never anything about you.
• Postmark, which delivers your sign-in codes. It receives your email address.
• Railway, which hosts the application and its database.

Nobody else. We do not sell or share your data, there is no analytics service, no advertising network and no third-party tracking script on any page of this site.

When you open a shop from Music Keeper, that is a plain link. We add no referral or affiliate code, we earn nothing whichever shop you choose, and we tell the shop nothing about you. What happens after you arrive is between you and them, under their privacy policy.

Your library stays until you delete it or your account, because the point of the product is telling you in September what you looked at in March. Sign-in codes are destroyed ten minutes after they are issued, or the moment they are used.

You can export everything we hold about your library and playlists as CSV or JSON from your dashboard, at any time, with nothing held back. You can ask for your account and everything attached to it to be deleted by emailing contacto@michichaman.com. Deletion is a real delete, not a flag.

One cookie, holding your signed-in session. It ishttpOnly, so scripts cannot read it, and it exists only to keep you signed in. There are no analytics, advertising or tracking cookies, which is why this site has no cookie banner: it has nothing to ask you about.

If this policy changes in a way that affects what we collect or who sees it, the change will be announced on this page before it takes effect. Last updated 16 September 2026.