PRIVACY

WHO WE ARE

Next Week's Playlist ("we") helps you follow live-music venues and get a weekly Spotify playlist of upcoming artists. Pitch: Discover music without the algorithms. Site: nextweeksplaylist.com . Contact: blake@nextweeksplaylist.com .

WHAT WE COLLECT

• Spotify account basics — when you log in with Spotify we store your Spotify user id, display/email from Spotify, and OAuth tokens needed to create and update your playlist.
• Email — the address from Spotify (you can change it in Settings) so we can send the optional weekly playlist email.
• Venue follows — which venues you follow, so we know which upcoming shows to include.
• Playlist sync — your Spotify playlist id/uri and simple sync status so we can rebuild the weekly playlist.
• Payment (via Stripe) — if you upgrade ($10/year or $30 lifetime), we store Stripe customer / subscription ids and plan status on your account. Card numbers stay with Stripe; we do not store full card details.
• First-party analytics events — product events in our own database (for example page views, follows, email clicks, upgrade funnel steps). By design we do not store IP address or User-Agent on those events. Properties are things like path, venue id, counts, and plan enums — not your email or Spotify tokens.
• Session cookies — a signed session cookie so we know you are logged in across requests.

WHY WE USE IT

• Run the product: login, venue follows, weekly Spotify playlist, optional email.
• Process freemium upgrades and cancellations through Stripe.
• Understand usage with first-party analytics so we can improve the app.
• Respond when you email blake@nextweeksplaylist.com .

THIRD PARTIES

• Spotify — authentication and playlist create/update. Their terms and privacy policy apply to data Spotify holds.
• Stripe — payment processing for annual and lifetime plans.
• CloudMailin — outbound weekly playlist email (SMTP on Heroku).
• Heroku — hosting for the web app, worker, and Postgres database.

We do not sell your personal information. We do not use a separate product-analytics SaaS for the main funnel; product metrics are first-party events in our database.

COOKIES AND SESSIONS

We use a first-party session cookie (Rails / Devise) to keep you signed in. Spotify and Stripe may set their own cookies when you use their login or checkout flows on their domains. Clearing cookies or logging out ends your local session.

EMAIL

Weekly playlist email is optional. Turn it off in Settings ("Receive weekly email") or use the one-click unsubscribe link in the email — both clear the same subscribed flag. Unsubscribing from email does not delete your account or unfollow venues.

RETENTION

We keep account, follow, playlist, and payment-status data while your account is active so the product can work. First-party analytics events are retained for product metrics unless we later trim older rows. Hosting and email providers keep operational logs per their own policies. Stripe retains payment records as required for billing and compliance.

DELETE YOUR ACCOUNT

Signed-in users can delete from Settings with [ DELETE MY ACCOUNT ] . That cancels active Stripe subscriptions, clears your Spotify connection tokens, turns off weekly email, and signs you out. The user row may remain in a deactivated form (for example historical ids) rather than a hard database wipe. Venue follows and analytics rows tied to your user id may remain unless you ask us to remove more.

Want a fuller wipe, or need help if you cannot sign in? Email blake@nextweeksplaylist.com .

CONTACT

Questions or requests about this policy: blake@nextweeksplaylist.com . Feedback on the product uses the same address.