Privacy

What stays on your device

When you drop your Spotify zip, it is opened and counted in your browser. Your plays, the charts, your record’s title, your sealed guesses and everything else Rotation Diary works out are saved in this browser’s own storage (local storage and IndexedDB) so you can come back. None of it is sent to us.

“Forget this device’s history” at the bottom of Your Rotation Diary deletes it. So does clearing this site’s data in your browser.

When you ask for a reminder

If you ask us to remind you when your Spotify file is likely ready, we receive the email address (and, if you opt in to texts, the mobile number) you type, the schedule you pick, roughly when you asked Spotify, your time zone offset, and the exact consent sentence you agreed to. Our host adds your approximate country.

• Emails are scheduled and sent by Resend. Texts are scheduled and sent by Twilio. Each holds your address or number until the last reminder goes out or you stop them.
• If we keep a reminder list, it is stored with Supabase and used only to send these reminders.
• We keep a one-line record that you agreed: the time, the country, the sentence, and a scrambled fragment (a hash) of your address, not the address itself.
• We send at most three reminders, about your data request only. We never use your address or number for anything else, and never sell or share it for marketing.

Every email has an unsubscribe link. Reply STOP to any text. Dropping your zip cancels the reminders still to come.

When you share something

• Images you save (your fingerprint, a month, a poster) are made in your browser and saved to your device. Where you post them is up to you.
• Your Rotation Diary card carries only the fields you choose, packed inside the link itself, after the “#”. Browsers don’t send that part of a link to any server, so we never receive it, but anyone you give the link to can read it. Comparing two cards happens in the browser.
• Gift links work the same way: the songs and names you typed travel inside the link.

What your browser loads from other companies

• Fonts come from Google Fonts, which sees your IP address when it sends them.
• Spotify’s player appears in the gift maker only if you paste a Spotify playlist link. It is Spotify’s own embed, under Spotify’s privacy policy. We don’t read anything from it.
• Album and artist pictures in the Archive are looked up through our server from Deezer, by artist and song name only.

Extras in the Archive

The Archive is the earlier version of Rotation Diary, kept for its tools. When these features are switched on and you use them:

• Asking the oracle sends your question and a summary of your listening (your eras, top artists and songs, and totals, not your individual plays) to Anthropic to write the reply.
• Save as a Spotify playlist sends the list of songs to Spotify, which creates a public playlist on Rotation Diary’s own account and gives you its link.

Unlisted experiments

A few pages that Rotation Diary doesn’t link to (the “now playing” room and its sign-in) let someone show friends what they are playing. If you use them, you sign in to Spotify on Spotify’s own site inside a browser run for you by Browserbase. Rotation Diary’s servers never receive your password. They read the song that is playing and show it, with the name you pick, to anyone who has your room link. The room can also show public YouTube comments about the song, looked up through Apify by song and artist name.

Prints and gift cards

Prints and gift cards aren’t on sale yet. Before they are, this page will say what goes to the payment and printing companies, and you’ll see it before you can buy.

Hosting and logs

Vercel hosts Rotation Diary and keeps standard request logs (IP address, browser, time, page) for a limited time to run and protect the site. Rotation Diary has no accounts, no ads and no analytics trackers.

Your choices

• Stop reminders with the unsubscribe link, by replying STOP, or by dropping your zip.
• Delete what’s on your device with “Forget this device’s history”, or by clearing this site’s data.
• To ask what we hold about you, or to have it deleted, write to the address below. Usually that is nothing but a pending reminder.

Children

Rotation Diary isn’t meant for children under 13, and we don’t knowingly collect anything from them.

Changes

If this page changes, the date at the top changes with it. We won’t start using something you already gave us in a new way without asking.