Privacy

What Zentrale reads

With your consent on Spotify's own page: your profile id and name, your playlists and their tracks, your saved songs, albums, shows and episodes, your top artists and tracks, your recently played tracks, and your playback state. The exact permissions are listed on Spotify's consent screen.

What Zentrale stores

Your Spotify access and refresh token, a snapshot of the statistics computed from the data above, a log of the plays it has seen, a log of every change it made to your playlists (so each one can be undone), and, if you use them, mood tags and analysis results. Everything is encrypted with AES-256-GCM and kept in a private storage bucket that is not reachable from the web.

Who else sees it

Nobody. For mood tags and the AI analysis, artist and song names and counts (never your token or account id) are sent to an AI model through Vercel AI Gateway. For concerts and tempo, artist names and song ISRCs are looked up at Bandsintown and Deezer. These features are only enabled for invited power users.

Deleting everything

In the app, Account, Delete my data removes every file stored for you. You can also revoke Zentrale's access at any time in your Spotify account under Apps.

Waitlist

The email you leave is used once, to tell you when a seat opens.