Privacy Policy

My Music Bridge is a personal-use software tool that synchronises an account owner's Spotify Liked Songs with a regular YouTube playlist. It is not a public account-registration service. This policy describes how the application handles data when the owner grants access to Spotify and Google/YouTube.

1. Data accessed

• Spotify: saved-track identifiers, titles, artist names, album information, durations and saved dates, using the user-library-read permission.
• YouTube: the authorised channel identifier, playlist identifiers, existing playlist video IDs, public video information and metadata needed to find matching recordings.
• Authorisation: access and refresh tokens needed to make authorised API calls. The app does not collect Spotify or Google account passwords.

2. How the data is used and shared

Spotify track titles and artists are sent to Google's official YouTube Data API solely to search for matching recordings. The YouTube API is used to check the destination playlist and add selected videos. High-confidence matches can be added automatically; uncertain matches are flagged for the owner to review. The application does not sell user data, share it with advertisers or use it to train an AI model. It does not download or extract YouTube audio/video.

3. Storage and third-party services

The agent's private source repository and processing state are stored on GitHub. OAuth credentials are kept in GitHub Actions encrypted secrets, and any provider-rotated refresh tokens may be stored as encrypted state. Minimal track/video identifiers and quota counters are stored in the private state branch to avoid repeated actions. Short-lived review reports are stored as private GitHub Actions artifacts. Spotify and Google process information through their own APIs. This public information website is hosted by Cloudflare, which may process standard website request data as described in its privacy policy.

4. Retention

Runs retrieve current Spotify and YouTube information, and the application avoids permanently caching full music search results. Runtime processing state is refreshed and pruned as the library changes. GitHub Actions review reports are configured to expire after seven days. YouTube API-derived information is refreshed or deleted according to the applicable YouTube API Services policies, including relevant 30-day restrictions. GitHub and other providers may retain operational backups according to their own policies.

5. Control, deletion and revocation

The owner can disable the scheduled GitHub Actions workflow, remove its saved secrets, delete private processing state and reports, and revoke the application's permissions in Spotify connected-app settings and Google Account third-party connections. Revoking access stops future authorised API calls once the grant is invalidated. Existing YouTube playlists and videos added to them are not automatically removed.

6. Other services' policies

Use of YouTube features is subject to the YouTube Terms of Service and Google Privacy Policy. Spotify services are subject to Spotify's terms and privacy policies. Cloudflare's site hosting is subject to its own privacy practices.

7. Changes and contact

This notice may be revised if the software's data use changes. The updated date above will be amended if that happens. For privacy questions about My Music Bridge, contact natsukuso7@gmail.com.