privacy Policy

Privacy Policy

Status: Draft – Placeholder pending technical review
Last updated: October 2026

1. Introduction

Venres Playlist Converter is a web application designed to help users transfer playlists from Spotify to YouTube.

This Privacy Policy is a preliminary draft intended to describe the expected categories of data processing associated with the service. It will be reviewed and updated after the application's technical implementation has been examined.

2. Data Controller

Service operator:
Alexander Mäder
Alt-Fechenheim 67
60386 Frankfurt am Main
Germany

Contact email: [email protected]

The identity and contact details of the responsible data controller, where required by applicable law, will be confirmed before this policy is finalized.

3. Categories of Data We May Process

Depending on how you use the service and how the application is technically configured, the following categories of data may be processed:

  • Account authorization data: Information associated with connecting your Spotify and YouTube accounts.

  • Playlist information: Playlist names, track titles, artist names, video identifiers, and other information required to match and transfer playlist items.

  • Authentication and session data: Information used to maintain your session and associate requests with your account.

  • Technical data: Information contained in server logs, such as request timestamps, error information, and technical diagnostic data, where collected.

  • Communication data: Information you provide if you contact the service operator.

The exact data collected and processed will be verified during the technical review.

4. Purposes of Processing

Data may be processed for the following purposes:

  • Connecting to Spotify and YouTube at your request.

  • Searching for YouTube videos that match tracks in your Spotify playlists.

  • Creating or updating YouTube playlists as requested by you.

  • Maintaining authentication sessions and processing transfer jobs.

  • Troubleshooting errors, protecting the service, and preventing misuse.

  • Responding to user inquiries.

Personal data will be processed only where an appropriate legal basis exists under applicable data protection law.

5. Spotify and YouTube Integrations

Venres Playlist Converter uses integrations with Spotify and YouTube to provide playlist transfer functionality.

When you authorize the application, the relevant platform may provide access to information permitted by the permissions you grant.

The application is intended to use this access only to provide the requested functionality. It does not claim ownership of your Spotify playlists or YouTube content.

Your use of Spotify and YouTube is also subject to the respective providers' terms and privacy policies:

The precise permissions requested, the information received, and the handling of access tokens and refresh tokens will be documented after the OAuth implementation has been reviewed.

6. Data Storage and Retention

The service uses Cloudflare infrastructure. Depending on the final implementation, session information, transfer progress, playlist metadata, or other technical information may be stored or processed using Cloudflare services.

The exact data stored, its storage location, retention period, and deletion procedures are still subject to technical verification.

This section will be updated to explain:

  • Which information is stored.

  • How long it is retained.

  • When information is deleted.

  • How users can request deletion, where applicable.

7. Sharing of Data and Service Providers

Data may be processed by third-party service providers where necessary to operate the application, including:

  • Cloudflare: Hosting, infrastructure, and related technical services.

  • Spotify: Account authorization and access to playlist information.

  • Google/YouTube: Video search, playlist creation, and related API functionality.

The final policy will identify the relevant providers and explain their roles in accordance with the actual technical setup and applicable legal requirements.

Personal data will not be sold to third parties. Any additional disclosures or transfers will be described in the final version of this policy.

8. International Data Transfers

Some service providers may process data in countries outside the European Economic Area.

Whether international transfers occur, and which safeguards apply, will be assessed as part of the technical and legal review. Where required, appropriate safeguards under applicable data protection law will be implemented.

9. Cookies and Similar Technologies

The application may use cookies or similar technologies to maintain sessions and provide essential functionality.

The exact technologies used, their purposes, and whether consent is required will be documented in the Cookie Policy after the application has been reviewed.

For further information, please refer to the Cookie Policy: https:/www.venres.net/cookies.

10. Data Security

Reasonable technical and organizational measures are intended to protect information against unauthorized access, loss, misuse, or disclosure.

The specific security measures, including token handling, access controls, and data deletion procedures, will be verified before this policy is finalized.

Users should never share their passwords, API keys, or authentication tokens with the service operator through public channels.

11. Your Privacy Rights

Depending on applicable law, including the General Data Protection Regulation (GDPR), you may have the right to:

  • Request access to your personal data.

  • Request correction of inaccurate data.

  • Request deletion of your personal data.

  • Request restriction of processing.

  • Object to certain types of processing.

  • Request data portability where applicable.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with a competent data protection supervisory authority.

To exercise applicable rights, contact: [email protected]

Requests will be handled in accordance with applicable law.

12. Revoking Access

You can manage or revoke the permissions granted to third-party platforms through the relevant account settings, subject to the options offered by those platforms.

Revoking access may prevent the application from transferring playlists. The procedure for deleting any data already stored by the application will be documented once the implementation has been reviewed.

13. Children's Privacy

The service is not specifically designed for children. The applicable age requirements and any additional measures needed to protect children's personal data will be reviewed before the service is made publicly available.

14. Changes to This Privacy Policy

This policy will be updated when the application's technical implementation, data processing practices, or legal requirements change.

The effective date of the final policy will be displayed at the top of the page.

15. Contact

For privacy-related questions, requests, or concerns, contact:

Alexander Mäder
Alt-Fechenheim 67
60386 Frankfurt am Main
Germany

Email:‍ ‍[email protected]

Draft notice: This document is a preliminary placeholder and has not yet been verified against the application's actual code or data processing practices. It must be reviewed and completed before being relied upon as the final Privacy Policy or submitted as evidence of compliance with applicable data protection requirements.