Effective September 27, 2026
Hearmap is a privacy-first Spotify listening analytics tool. We do not require an account, collect personal information, or upload your data to any server. Your listening history is processed and stored entirely in your browser.
For questions about this policy or to exercise your privacy rights, contact us at privacy@hearmap.app.
When you import your Spotify export files, all parsing and analysis happens locally in your browser using Web Workers. Your listening history is stored in IndexedDB on your device. No listening data is uploaded to our servers or any third party.
Because this processing happens entirely on your device, we never have access to your listening history. We act as the provider of the software, not as a processor of your data.
Hearmap is hosted on Vercel. When you visit hearmap.app, Vercel processes standard connection data (such as your IP address) to deliver the website. This is necessary for the website to function. This connection data includes the address of each page you open inside Hearmap, and detail pages for artists and tracks carry that artist or track name in their address. Vercel is certified under the EU-US Data Privacy Framework.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in providing and operating the website.
We use Vercel Web Analytics to understand general usage patterns and performance. Vercel Web Analytics does not use cookies, does not collect personal identifiers, and cannot identify individual users. Visitors are identified by a temporary hash that is automatically discarded after 24 hours. Data collected includes page URLs, referrer, country-level geolocation, device type, operating system, and browser. Before a page address is sent to Vercel Web Analytics, Hearmap replaces the artist or track name in detail-page addresses with a placeholder, so the artists and tracks you view are not included in analytics.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in understanding how the website is used and improving performance.
To display cover art, Hearmap sends artist and track names to the following services:
These requests include only the artist and track names needed for the lookup. No listening history, timestamps, or other personal data is sent. Your IP address is visible to these services as part of the HTTP request, as is standard for any web request.
Cover images are loaded by your browser directly from these services and do not pass through servers operated by Hearmap.
MusicBrainz is operated by the MetaBrainz Foundation (based in the US/EU). The Cover Art Archive is hosted by the Internet Archive (based in the US). The iTunes Search API is operated by Apple Inc. (based in the US).
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in providing the functionality you requested.
Hearmap does not use cookies for tracking, authentication, or any other purpose.
Some of the services described above are operated from the United States. Where personal data (such as IP addresses) is transferred outside the EU, these transfers are covered by the EU-US Data Privacy Framework or standard contractual clauses.
Since all listening data is stored locally in your browser, you have full control over it. You can delete all imported data at any time via Settings. Clearing your browser data will also remove all Hearmap data.
Vercel Web Analytics retains anonymized, aggregated statistics only. No personal data is retained by us.
Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. Because Hearmap does not store personal data on its servers, most of these rights are not practically applicable — your data is already entirely under your control on your own device.
If you believe you have a privacy concern or wish to exercise any of these rights, contact us at privacy@hearmap.app.
You also have the right to lodge a complaint with your local data protection supervisory authority.
Hearmap is not intended for users under 16. We do not knowingly collect data from children.
We may update this policy from time to time. Material changes will be noted with an updated effective date at the top of this page.
Hearmap is an independent project and is not affiliated with, endorsed by, or associated with Spotify AB.