Last updated: February 28, 2026
Email address — provided when you sign in via magic link. Used solely for authentication.
Playlist data — song titles and artist names you submit for analysis. This data is sent to our AI provider for processing and is not permanently stored.
Session cookie — a JSON Web Token that keeps you signed in. See the Cookies section below.
Authentication — your email is used to send a one-time magic link via Resend. We do not send marketing emails.
AI analysis — your playlist is sent to OpenRouter/Anthropic Claude to generate your soulprint analysis. The playlist data is not retained by us after processing.
Session management — a session JWT cookie keeps you authenticated between requests.
User records are stored in Vercel KV (Redis) with a 7-day TTL. After 7 days of inactivity, your data is automatically deleted.
Email verification tokens expire after 1 hour.
We do not maintain long-term databases of user information.
We share data with the following services, only as needed:
We do not sell your data. We do not use analytics, advertising cookies, or third-party trackers.
We use a single essential cookie for authentication:
authjs.session-token / __Secure-authjs.session-token — session JWT, strictly necessary for authentication. No expiry beyond your session.We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
If you are in the EU/EEA, you have the right to:
Since all user data auto-expires after 7 days, erasure happens automatically. For immediate requests or any other enquiries, contact privacy@soulprint.app.
Soulprint does not use Google Analytics, Meta Pixel, or any other tracking or analytics service. We do not serve ads. Your visit is not tracked beyond what is necessary for the service to function.
We may update this policy from time to time. Changes will be reflected on this page with an updated date.