CatchTunes Privacy Policy
Effective date: November 1, 2026
1. Summary
CatchTunes collects only what it needs to run its features. We do not sell your data, show ads, or use analytics or tracking cookies. Most features work without storing anything about you. You can delete your data yourself with /deletemydata or on the dashboard's My data page, and you can reach us through the contact form for anything else. The Service is operated by Christopher A. Jones, an individual in Texas, USA.
2. What we collect and why
| What | Details | Why | How long we keep it |
|---|---|---|---|
| Linked Spotify account | Your Discord user ID, your Spotify user ID and display name, a Spotify refresh token (encrypted), and when you linked | To show your playlists and what you are playing when you ask | Until you unlink or delete your data |
| Spotify content | Your playlists, their tracks and what you are currently playing | To answer your command | Not stored. Read from Spotify when you ask, held in memory for a few minutes at most |
| Chart plays | For members who ran /charts optin: Discord user ID, server ID, song title, artist, Spotify track ID and time, taken from your Discord "Listening to Spotify" status | To build that server's charts | 12 months, then deleted. Deleted right away when you opt out |
| Chart opt-in | Your Discord user ID and the server ID | To know whose listening to count | Until you opt out |
| Song suggestions and votes | The suggester's Discord user ID, the server, the song, its status, and the user IDs of members who voted | To run voting and add winners to the server playlist | Until the bot is removed from the server. Your user ID is removed from them when you delete your data |
| Game scores | Your Discord user ID, the server and your points | To keep the server leaderboard | Until you delete your data or the bot is removed from the server |
| Server settings | Server ID, chosen channels and playlists, vote threshold, post hour, preview setting, and which songs were posted as track of the day | To run the features admins set up | Deleted as soon as the bot is removed from the server |
| Dashboard sign-in | Through Discord sign-in (scopes "identify" and "guilds"): your user ID, username, avatar, and the name, ID and icon of your servers and whether you can manage them | To show and manage your servers | 7 days, or until you sign out. Your Discord access token is never stored |
| Contact form messages | Your Discord user ID and username, the topic you chose and your message. They are sent to a private Discord channel that only the operator can read, and not stored in our database | To answer your question or request | Deleted automatically 90 days after you send it |
| Server logs | Error logs that may include Discord user and server IDs, and web server logs that include IP addresses and browser type | To keep the Service secure and fix problems | 30 days, then deleted |
| Backups | A daily copy of the database | To recover from failures | 14 days |
3. Messages and status in your server
When a server has link previews on, Discord sends the bot the text of messages in channels it can see. The bot only looks for Spotify and Apple Music links. It does not store message text.
For /nowplaying and charts, Discord shares members' activity status with the bot, including "Listening to Spotify". The bot only saves it for members who opted in to charts. For everyone else, /nowplaying reads it at the moment someone asks and does not store it.
4. Public information in servers
Song suggestions show the name of the member who suggested them. Charts show the top listeners by name in that server. The game leaderboard shows player names and points. /nowplaying shows what a member is listening to to anyone in that channel. These posts live in the server on Discord.
5. Who we share data with
We do not sell, rent or trade your data, and we do not share it for advertising. Only the operator has access to the database and logs.
- Discord runs the platform the bot works on. Its Privacy Policy covers what Discord itself collects.
- Spotify receives requests made with your Spotify account when you use a command that needs it. Its Privacy Policy applies.
- Odesli (song.link) receives the music links we convert. It does not receive your Discord identity from us.
- Bluehost hosts our server and database in the United States.
- Link destinations. Buttons that open Spotify, Apple Music, YouTube Music or other services take you to their sites, where their own privacy policies apply.
- Legal reasons. We may disclose data if the law requires it, or to protect users, the Service or others from harm or fraud.
6. Cookies
The website uses one cookie, ct_sid, to keep you signed in to the dashboard. It is strictly necessary and expires after 7 days. We use no analytics, advertising or tracking cookies.
7. Your choices and rights
- Unlink Spotify: /unlink, the dashboard's My data page, or spotify.com/account/apps
- Stop chart tracking and delete your plays: /charts optout or the My data page
- Sign out of the dashboard: the Sign out button
- Delete everything we hold about you: /deletemydata or the My data page. To get a copy, correct something, or delete by request instead, send a request through the contact form. We will answer within 30 days.
- Removing the bot from a server deletes that server's settings, charts, suggestions and scores right away.
Depending on where you live (for example the EU, UK or California), you may have more rights under local law, including the right to complain to a data protection authority.
8. Legal basis (EU and UK users)
We process data to provide the Service you asked for (contract), to keep it secure (legitimate interests), and, for linked Spotify accounts and chart tracking, because you chose to (consent, which you can withdraw at any time). Our servers are in the United States, so your data may be handled outside your country.
9. Security
The website uses HTTPS, secure session cookies and protection against cross-site requests. Spotify refresh tokens are encrypted in the database, and Discord access tokens are never stored. No system is perfectly secure, and we will tell affected users if a breach puts their data at risk, as the law requires.
10. Children
The Service is only for people 13 and older. If you think someone under 13 has given us data, contact us and we will delete it.
11. Changes
We will post any update here and change the effective date. For material changes we will also post a notice on the website or in our support server.
12. Contact
Privacy questions and requests: the contact form.