• Your Spotify profile — your display name, email, profile picture, country and whether you're on Premium, as Spotify shares them when you sign in.
• Your Spotify sign-in — the keys that let Reprise read your listening, encrypted on this server. They never reach your browser.
• Your Last.fm sign-in — if you sign in with Last.fm: your username, public profile details, and the key that lets Reprise read your scrobbles, encrypted on this server.
• Your play log — every song you play: when, what, and for how long. Reprise reads it from Spotify while you have the site open and, so nothing is missed, from your recently played list about once an hour while you don't. With Last.fm, it reads your scrobbles from the past year when you join, then every 15 minutes.
• History you import — the plays in the Spotify data-export files you upload. The files themselves are kept on the server so an import can be run again; Spotify's extended export includes details like the IP address and device of each play, which Reprise doesn't use. They're deleted with the rest of your data.
• Your library — a copy of your Liked Songs, and the playlists you've pinned or played from, so the site doesn't have to ask Spotify each time.
• Usage counts — how many Spotify requests and AI questions your account made each day, to keep everyone inside the shared limits.
• In your browser only — display settings (theme, text size, animations) and, if the weather is on, the city it was last looked up for.

• Spotify — is where your listening comes from. Reprise only changes anything on your account when you press something: play, skip, the heart, saving a playlist.
• Last.fm — if you sign in with it, is where your scrobbles are read from. Reprise only reads; it never scrobbles or changes anything there. Powered by AudioScrobbler.
• Anthropic (Claude) — writes the Insights brief. When you use it, figures worked out from your play log are sent to Anthropic's API to write the answer. Anthropic doesn't train its models on API data by default. If you never useit, nothing is sent.
• Music databases — lyrics (LRCLIB), song background (Genius, Wikipedia), credits and genres (MusicBrainz), artist photos and covers (Deezer) and how songs sound (ReccoBeats) are looked up by song or artist name, or Spotify's song id — never your name or account.
• YouTube — only if you press play on the setup guide's video about getting your Spotify data. It plays from YouTube's privacy-enhanced player; nothing is loaded from YouTube until you press it.
• Weather — if it's on, your browser asks GeoJS for your approximate city from your internet address and Open-Meteo for the forecast. Reprise's server never sees either. Turn it off in Settings › Privacy.

Nothing is sold or shared for advertising, and there are no analytics or tracking scripts.

One cookie keeps you signed in (for 30 days), and a short-lived one protects the Spotify sign-in step. That's all: none are for tracking.

• Export — Settings › Your data › Export as CSV downloads your whole play log.
• Delete — Settings › Privacy › Delete all my data removes your account and everything above from this server straight away, and signs you out.
• Disconnect — to stop Reprise reading your Spotify account at all, remove it under Apps in your Spotify account; for Last.fm, under Applications in your Last.fm settings.

Your data is kept until you delete it. Questions: ask the person who invited you to Reprise.