The fine print, in plain words

Privacy

What data we access

With your permission, LineupLove reads your library from whichever service you connect, only to find overlaps with a festival lineup. When you connect YouTube, we use YouTube API Services and the read-only youtube.readonly scope to access your YouTube channel name and picture (so you can confirm the connected account), your channel subscriptions, the titles in your Liked Music playlist (or your liked videos if Liked Music is unavailable), and the videos in your own playlists. On Apple Music we read the equivalent: your saved or liked songs, top artists, and followed artists. On Spotify we read your liked songs, top artists, followed artists, and playlists. On SoundCloud we read your likes, reposts, followed artists, playlists, and recently played tracks. If you prefer not to log in to Spotify, you can instead paste a public playlist link, and we read only that playlist's name and its track and artist names, nothing else. We never receive your password or payment information. Beyond reading your library, the only permission we hold is the one that lets you save your matches as a playlist, and we use it only when you tap Create playlist.

How we use your data

We use the channel, video, and track titles only to extract artist and channel names, then match those names against a festival's public lineup. The only thing we show you is the overlap: the artists on that lineup you already follow or listen to, ranked by how much you listen. If you connected a service with a full login, you can also tap to save your matches as a playlist there, which is the only time we write anything, and only to that service. A pasted Spotify playlist link is read-only: with that option we never connect to your Spotify account at all. We never use your data for advertising or profiling, and we never use it to train or improve any AI or machine learning model. LineupLove's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we share your data

We do not sell your data, and we do not share your Google user data, or any data from a connected service, with advertisers, data brokers, or any other third party. The only optional sharing is between friends inside LineupLove: if you explicitly turn on match sharing, friends you invite can see which lineup artists you matched. It is off by default and you can turn it off at any time on your account page. We rely on a small set of service providers (our cloud hosting and database vendors) solely to run the app on our behalf, and they may use your data only to operate LineupLove, never for their own purposes.

How we store and protect your data

Your full library is scanned in memory and is never stored. We keep only the result of the match: which lineup artists you matched and which of your liked tracks belong to them. Your access and refresh tokens are encrypted at rest using AES-256-GCM authenticated encryption with a unique initialization vector per token, and all traffic runs over HTTPS. Tokens are stored on our servers and are never exposed to your browser or to any third party. For a pasted Spotify playlist we also store the playlist's id and name, so we can re-read it when your matches refresh.

How long we keep it, and how to delete it

We keep your tokens and your matches only while your account is connected, and each new scan replaces the previous results. You can delete your data yourself at any time on your account page, with no request or support ticket needed. Disconnect immediately deletes that service's tokens and every artist match derived from it. Delete everything removes your entire account and all data we hold about you, including your email and preferences. You can also revoke LineupLove's access at any time from your Google Account security settings.

What we collect directly

If you choose to give it: your email address (waitlist or updates) and whether you are attending. Each has its own checkbox, and nothing is implied. This is separate from your connected music account, and we never receive your email from Google.

What we never do

No selling data. No ad networks or data brokers. No training AI or machine learning models on your listening. No analytics beyond what keeps the lights on. This is a free fan project, not affiliated with any festival, Spotify, SoundCloud, Apple Music, or YouTube.

Policy version 2026-07-08 · Questions? damian.polan@gmail.com

← Back to LineupLoveFollow us on Instagram