Back to home

Privacy Policy

Last updated: 2026-04-20

1. Who we are

SwingPlaylist is a personal, non-commercial project run by Jean-Pierre Lambelet in Switzerland. The site generates Lindy Hop playlists on Spotify using AI services and the Spotify API.

Contact: admin@swingplaylist.com

2. Data we collect

When you create an account

  • Email address (needed for sign-in and password reset)
  • Display name
  • Bcrypt hash of your password (we never store plain passwords)

When you use the service

  • Playlists generated and linked to your account
  • Song votes and ratings from the "This or That" and "Rate" games
  • Technical logs (IP address, user-agent) kept briefly to prevent abuse

When you contact us

  • Message content and the email you provide in the contact form

3. Why we process this data

  • Authenticate you and keep your account safe
  • Generate and save your playlists
  • Reply to your messages
  • Improve the service through aggregated, anonymous statistics

Legal basis: performance of the service you asked for, and our legitimate interest in running a safe, working site. Analytics and advertising cookies are only set with your consent.

4. Third-party services

To deliver the service we share some data with:

  • Spotify: playlists are saved to a dedicated SwingPlaylist account. Spotify privacy policy.
  • Google: Google OAuth sign-in, Google Analytics, and AdSense (optional, consent-based). Google privacy policy.
  • Anthropic / Groq: we send your selected tracks (without your email) to an AI model that builds the playlist.
  • Infomaniak: Swiss hosting provider for the site, database, and email.

5. Cookies

We use two categories of cookies only:

  • Essential cookies: sign-in session and CSRF protection. Required for the site to work.
  • Analytics and advertising cookies: Google Analytics and AdSense, only if you accept them via the consent banner.

You can change your mind at any time by clearing local storage or writing to us.

6. Retention

  • Account and playlists: until you delete your account.
  • Technical logs: 30 days maximum.
  • Contact messages: 12 months, then deleted.

7. Your rights

Under GDPR and the Swiss Data Protection Act you can ask at any time to:

  • access your data,
  • correct or delete it,
  • restrict or object to processing,
  • receive a portable copy,
  • withdraw your consent.

Write to admin@swingplaylist.com. You may also file a complaint with your local data protection authority.

8. Security

Passwords are hashed with bcrypt. Traffic goes over HTTPS. We never have access to your plaintext password.

9. Changes

This policy may change. The update date at the top of the page shows the latest version.