Privacy Policy

Last updated June 11, 2026

Crossfade is a small tool that copies a public YouTube playlist to your Spotify account. It is designed to know as little about you as possible. This page explains exactly what it touches and what it doesn't.

What Crossfade accesses

• YouTube: the title and track list of the public playlist you paste. Nothing about your YouTube or Google account.
• Spotify: after you connect your account, Crossfade can search the Spotify catalogue and create playlists on your behalf. That is the full extent of the permissions it requests.

What Crossfade stores

Nothing, server-side. There is no database, no user accounts, and no analytics. The only data kept anywhere is in your own browser:

• Spotify authentication tokens, stored as secure httpOnly cookies — an access token that expires within an hour, and a refresh token kept for up to 30 days so you don't have to reconnect each visit.
• The playlist URL you pasted, kept briefly in your browser's session storage so it survives the redirect through Spotify's login page.

Playlist data passes through the server only for the duration of each request and is never written down. Your data is never sold, shared, or used for anything beyond performing the conversion you asked for.

Disconnecting

Click disconnect in the header at any time — this deletes the authentication cookies from your browser. To fully revoke Crossfade's access to your Spotify account, you can also remove it atspotify.com/account/apps.

Third-party services

Crossfade uses YouTube API Services and the Spotify Web API. By using it you also agree to theYouTube Terms of Service; theGoogle Privacy PolicyandSpotify Privacy Policyapply to data those services process. Fonts are served by Google Fonts.

Changes & contact

If this policy changes, the date above will be updated. Questions:hey@davidumoru.me.