Plain-English summary
- We don't collect names, emails, or contact info. The site has no signup, no account creation, no newsletter popups.
- We don't track individual downloads. The download button is a static link to the APK file. We don't record who downloaded which file when.
- We don't use third-party ad networks. No Google Ads, no Taboola, no Outbrain, no pop-up networks.
- We don't use tracking cookies. No Facebook Pixel, no Google Analytics, no Hotjar session replay. We use a privacy-respecting aggregate counter only.
- Server logs are minimal. Standard nginx logs (IP, user-agent, timestamp, requested URL) are retained for 14 days for abuse mitigation, then deleted.
- No data is sold. We don't sell, rent, or share any data with third parties. There is no data to share.
Full policy
1. Information we collect
When you visit SpotifyApk.club, our servers automatically record standard HTTP log entries for up to 14 days. Each entry contains your IP address, the user-agent string sent by your browser, the timestamp of the request, and the URL you accessed. This information is used solely for abuse mitigation (DDoS protection, scraping detection) and is not linked to any individual identity. After 14 days the logs are purged automatically.
We do not collect your name, email address, phone number, physical address, payment information, or any other personally identifiable information. The site has no signup flow, no comment system, no contact form, and no user account mechanism.
2. Cookies
SpotifyApk.club does not use any tracking, analytics, or advertising cookies. The only cookies that may be set are strictly necessary for site operation (for example, a session cookie if you happen to load a page that uses server-side rendering). We do not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel, Segment, or any similar third-party tracker.
If we ever introduce a feature that requires cookies (a user preference toggle, for example), we will update this policy, display a banner, and request consent where required by GDPR / ePrivacy.
3. Third-party content
The site loads Google Fonts (CSS + WOFF2 files) for typography. Google Fonts may log requests to its own servers; see Google's privacy FAQ. We chose Google Fonts over self-hosting the WOFF2 files because the CDN edge improves load times globally. If you prefer zero third-party requests, a browser extension like uBlock Origin will block these for you without affecting site function.
4. Children
SpotifyApk.club is not directed at children under the age of 13 (or under 16 in jurisdictions with stricter digital-consent rules). We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data to us, contact privacy [at] spotifyapk.club and we will purge it.
5. Your rights (GDPR, CCPA, LGPD)
Because we collect essentially no personal data, most data-subject rights (access, deletion, portability) are trivially satisfied. If you want a copy of any data we hold about you (the only candidates are the 14-day server logs), email privacy [at] spotifyapk.club with the timestamp and your IP, and we'll send you what we have — or confirm we have nothing.
6. Security
The site is served over HTTPS with HSTS preload. We use TLS 1.3 wherever the client supports it. We don't store any user data on disk. The APK file itself is hosted on a CDN with origin shielding and immutable cache headers.
7. Changes to this policy
If we make material changes, we'll update the "Last updated" date at the top of this page and post a brief note on the homepage. Continued use of the site after such changes constitutes acceptance.
8. Contact
Privacy questions: privacy [at] spotifyapk.club. For other inquiries see our contact page.