SongSnagPrivacy Policy
SongSnag is a small, invite-only service run by an individual. You send a reel to the SongSnag account on Instagram (@song.snag) in a direct message, and SongSnag adds the song in it to your Spotify playlist. This policy explains what information SongSnag handles to do that.
What we collect
When you message the SongSnag account. Meta sends us the message. From it we keep:
- your Instagram-scoped user ID, a number that identifies you to our account. It is not your username or password, and we cannot use it to sign in as you;
- the message’s ID and time;
- for a reel: the link to its video file, its caption and its video ID.
Meta delivers every message you send to the account, including text. SongSnag only acts on reels and does not store the text of other messages.
When you link Spotify. You sign in on Spotify’s own site; we never see your Spotify password. We keep:
- the access and refresh tokens Spotify issues, stored encrypted;
- the ID of the “SongSnag” playlist created in your account.
We ask Spotify only for permission to create and change playlists, and use it only to create the SongSnag playlist and add songs to it.
For each reel you send. We keep a record of the song that was matched, whether it was added, and any error, so the same reel is not processed twice and so problems can be fixed.
Server logs. Our server logs the IDs above along with technical details of each request. Our hosting provider may log the IP addresses of visitors to this website.
This website uses no cookies, analytics or advertising trackers.
How we use it
Only to run the service: to identify the song in a reel you send, add it to your playlist, reply to you, and keep the service working. We do not use your information for advertising or profiling, and we do not sell it.
Who it is shared with
- AudD (audd.io), a music recognition service. We send it the reel’s video link or a short audio clip from the reel so it can identify the song. We do not send it your user ID.
- Spotify, to find the track and add it to your playlist.
- Meta, to deliver our replies to you through Instagram messaging.
- Our hosting provider, which runs the server and stores its database.
We do not share your information with anyone else, unless the law requires it.
How long we keep it
A reel’s video and audio are used to identify the song and are not kept afterwards. Your IDs, Spotify tokens and the record of your reels are kept until you ask us to delete them or SongSnag shuts down. Server logs are kept for a limited time.
Your choices
- Delete your data. See Delete your data. We delete it within 30 days of your request.
- Disconnect Spotify. In your Spotify account, open Manage apps and remove SongSnag. This stops SongSnag from reaching your account at once.
- Ask what we hold. Contact us and we will tell you what information we have about you, or correct it.
- Stop using it. If you stop messaging the account, SongSnag receives nothing further about you.
Security
Spotify tokens are encrypted before they are stored. The website and all connections to Meta, Spotify and AudD use HTTPS, and we check that every incoming message really comes from Meta. No system is perfectly secure, but we keep as little as we can.
Children
SongSnag is not meant for children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted on this page with a new date.
Contact
For any question about this policy or your information, send a message to the SongSnag account on Instagram (@song.snag).