Privacy Policy

Reach 4 Repeat · Effective date: August 26, 2026

Who we are

Reach 4 Repeat (“the site”) is a fan-made, invitation-only beta web application that creates and plays curated 45-second clip collections using the Spotify Web API and Spotify Web Playback SDK. It is not affiliated with or endorsed by Spotify AB. The site operator (the developer who invited you) acts as the data controller for the limited personal data described below.

What data we receive from Spotify

When you connect your Spotify account, this site receives only:

• Your Spotify display name
• Your Spotify profile image URL
• Your account type (Premium or Free)
• Your Spotify user ID, used solely to associate your clip collections with your account

Spotify’s sign-in step also exposes your account email address to its API. Reach 4 Repeat never displays, stores, or otherwise uses your email address.

Why we process this data

The sole purpose of the Spotify connection is authentication: confirming that you are a Premium user who has been invited to test this development site, and enabling playback through your own logged-in Spotify session. After login, your display name appears in the top-right corner of the page. Playback is controlled by telling your own Spotify session which track to play and when to fade.

What we never do

• We do not access your Spotify playlists, saved library, follows, or listening history.
• We do not run advertising, trackers, or analytics of any kind.
• We do not sell, rent, or share your information with any third party other than Spotify itself acting as the identity provider you logged in with.
• We do not store, download, or export audio in any form. Clips stream live from Spotify for playback inside the app only.

Storage and retention

While signed in, a single session cookie (HttpOnly) keeps you authenticated and is destroyed when you log out. Your clip collections — collection names, track metadata (title, artist, album art reference, durations), playback order, and per-track start offsets — are stored on this site’s server under your Spotify user ID so they remain available when you return. Deleting a collection erases it permanently. Logging out clears all tokens and cookies immediately but does not delete your collections.

Third parties

The only third party involved is Spotify AB, acting as the identity provider and audio source under its own terms and privacy policy. No other service receives data about you from this site.

Your rights

Wherever you live — including under the EU General Data Protection Regulation (GDPR), UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar laws — you have the right to access, correct, and erase your personal data. You can exercise these rights directly at any time:

• Delete collections from within the app (permanent and immediate)
• Log out to clear all access tokens and session cookies instantly
• Email the developer who sent you your invitation for anything else, including a full export or complete account removal

Invitations

Invitation slots are limited by Spotify’s Development Mode rules. If you no longer find this site useful, please email the developer who invited you so they can remove your name from the allowed-tester list and offer the slot to another user — no hurt feelings, we promise.

Changes to this policy

If this policy changes materially, the updated version will be posted on this page with a new effective date before taking effect.

Contact

Questions or concerns? Email the developer who sent you the invitation.

Back to Reach 4 Repeat