Privacy
What this site does with your data. Short, because it does very little.
No accounts. No cookies. No analytics. No tracking. Your Spotify connection, if you make one, never reaches this server.
What stays in your browser
These live in your own browser's storage and are never transmitted to this site's server:
| What | Where | Why |
|---|---|---|
| Spotify access token | sessionStorage | Authorises calls your browser makes directly to Spotify. Cleared when you close the tab. |
| Your last result set | localStorage | So reopening the map is instant instead of re-running the search. |
| Whether you've seen the walkthrough | localStorage | So it doesn't reappear every visit. |
Clearing your browser storage for this site erases all of it. Disconnecting Spotify removes the token immediately.
Your Spotify connection
Connecting Spotify is optional — everything else on the site works without it. It uses Spotify's PKCE flow, which means no password and no token ever passes through this server. Your browser talks to Spotify directly.
With permission granted, the site reads your top artists (to suggest starting points) and, if you ask it to, creates a private playlist in your account. It does not read your library, modify anything you didn't ask for, or make anything public.
You can revoke access at any time from your Spotify apps page.
What the server sees
- Artist searches you run. These are forwarded to the music databases below to get an answer. They aren't linked to you, because there is no "you" here — no account, no cookie, no identifier.
- Your IP address, briefly. Held in memory only, purely to enforce rate limits, and discarded as they expire. It is not written to disk or associated with your searches.
- Standard web server request logs, as with any website.
Where the music data comes from
Answers are assembled from four public music databases. Searching sends the artist names you typed to them:
- MusicBrainz — credits and relationships
- ListenBrainz — open listening statistics
- Last.fm — tags and similarity
- Deezer — catalogue and artwork
Those services have their own privacy policies covering what they log.
Contact
soundgraph is a personal, non-commercial project. Its source is public on GitHub, so every claim on this page can be checked against the code rather than taken on trust.