Privacy Notice

Last updated: February 27, 2026

1. Who We Are

This website (babasanmiadeyemi.com) is operated by Babasanmi “Jimi” Adeyemi (“we,” “us,” “our”). It serves as a personal portfolio and includes a Spotify data visualization feature that lets visitors sign in with their own Spotify account.

2. Data We Collect

Category	Source	Purpose	Retention
Spotify user ID, display name, email	Spotify API (with your consent)	Account creation & session management	Until you delete your account or 90 days of inactivity
Spotify refresh token (encrypted)	Spotify OAuth flow	Fetching your Spotify data on your behalf	Until you disconnect or 90 days of inactivity
Derived music insights (top artists, genres, etc.)	Computed from Spotify API responses	Displaying your personalized music data	30-day rolling cache, auto-deleted via TTL
Session identifier	Generated server-side	Maintaining your login session	24 hours (auto-deleted via TTL)

3. How We Use Your Data

• To authenticate you with Spotify and display your personalized music insights.
• To maintain your session so you don’t need to log in on every page.
• We do not sell, share, or transfer your personal data to third parties.
• We do not use your data for advertising or profiling beyond the music insights you explicitly request.

4. Data Security

• Spotify refresh tokens are encrypted at rest using AWS KMS.
• Session cookies use HttpOnly, Secure, and SameSite=Lax flags.
• All data is transmitted over TLS (HTTPS).
• Access to your data is scoped by your user ID — no other user can see your data.

5. Your Rights

You may exercise the following rights at any time:

• Access: View your data on the Your Spotify pages.
• Deletion: Delete all your data by clicking “Delete My Data” on the Your Spotify page, or by contacting us at the email below.
• Disconnect: Log out at any time; your session is destroyed immediately.
• Portability: Your data originates from Spotify and is available via Spotify’s privacy settings.

If you are a resident of California (CCPA/CPRA), Indiana (ICDPA), or another US state with a consumer privacy law, you may exercise your rights by contacting us. We respond within 45 days.

6. Children’s Privacy

This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, please contact us to have it removed.

7. Third-Party Services

• Spotify: When you sign in, you authorize Spotify to share your profile and listening data with this site. See Spotify’s Privacy Policy.
• AWS: Our infrastructure runs on Amazon Web Services. See AWS Privacy Notice.

8. Changes to This Notice

We may update this notice periodically. The “Last updated” date at the top reflects the most recent revision. If material changes affect how your data is processed, you will receive an in-app notification upon your next visit.

9. Contact

For privacy inquiries or data requests:
Email: babasanmiadeyemi@gmail.com