Privacy Policy

Last updated: March 15, 2026

Overview

Spinmusic is a private music player that runs in your browser. Your music files stay on your device and are never uploaded to any server. This privacy policy explains what data the Spinmusic website collects when you visit or use it.

Responsible party

Mathias Bader
Hölderlinsallee 12
22303 Hamburg, Germany
E-Mail: contact@spinmusic.de

Your music stays local

Spinmusic uses the File System Access API to read music files directly from a folder on your computer. Your music files, lyrics, and cover art are never uploaded to our servers. All playback and editing happens entirely in your browser.

No account required

Spinmusic does not require you to create an account. There is no registration, no login, and no personal data collected to use the application. You simply open a folder and start listening.

Cookies

Spinmusic does not use cookies. No advertising or third-party tracking cookies are used.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in providing a functioning website.

Browser storage

Spinmusic uses your browser's localStorage to remember playback state (last folder, last song, volume, playback position). This data never leaves your browser and is not sent to any server.

Page view analytics

When you visit the Spinmusic website, we collect:

• IP address
• Page visited (URL)
• Browser and operating system (from User-Agent header)
• Referring page
• Date and time of visit
• Approximate location (country and city, derived from IP)

This data is stored on our own server and is used solely by us to understand how many people visit the site. It is not shared with any third party. There are no analytics scripts running in your browser — tracking happens server-side only.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding website usage.

Geolocation lookup

To determine approximate visitor location, your IP address is sent to ip-api.com on first visit. The result is cached on our server for 30 days, so repeat visits do not trigger additional lookups. This is the only external service that receives any visitor data.

ip-api.com privacy policy: ip-api.com/docs/legal

No data sharing

We do not sell, trade, or share your personal data with third parties. The only exception is the IP-based geolocation lookup described above.

Data retention

• Page view logs — stored for 90 days, then automatically deleted
• Geolocation cache — 30 days per IP address

Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Restriction — restrict processing of your data
• Data portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at contact@spinmusic.de.

You also have the right to lodge a complaint with a supervisory authority. The responsible authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

Changes to this policy

We may update this privacy policy from time to time. The date at the top of the page indicates the last revision.