privacy policy

last updated: february 2026

overview

seasons of your life is committed to your privacy. your music listening data (from spotify or apple music) is processed entirely in your browser and is never uploaded to our servers. we collect your email address when you sign up for access, and we use stripe for payment processing.

music data processing

when you upload your spotify extended streaming history or apple music privacy export, it is processed entirely using javascript in your web browser. your data is:

• read and parsed locally using the jszip library
• analyzed and converted into statistics in your browser's memory
• stored in your browser's indexeddb so you can return to your results without re-uploading
• never transmitted to any server, api, or third party

spotify's extended streaming history files may contain identifying information such as your ip address, username, platform, and user agent. apple music exports may contain your apple id and device information. our processor discards all of this — only song titles, artist names, album names, play durations, and timestamps are extracted. no identifying information is ever stored or retained.

we have no ability to see, access, or retrieve your listening history at any point. this is a deliberate architectural choice to protect your privacy.

data we collect

email address

when you sign up for seasons of your life, we collect and store your email address. this is used to:

• send a confirmation email when you sign up
• send you a sign-in link to access the app
• authenticate you via magic link (no password stored)
• send occasional newsletters (you can unsubscribe at any time)

your email address and account status are stored in our database hosted on supabase. we also maintain an email log to track delivery status. we do not sell or share your email address with third parties.

payment information

premium access purchases are handled by stripe. when you make a purchase, your payment details (credit card number, billing address) are collected and processed directly by stripe. we do not store your credit card number on our servers. we receive only a confirmation of payment status and your email address from stripe. subject to stripe's privacy policy.

data stored in your browser

local storage

the following data is saved in your browser's local storage and never leaves your device:

• theme preference (light or dark mode)
• authentication session data
• era definitions you create (era names and date ranges)
• birth information for the star songs feature (date, time, place)
• profile metadata (profile names, file labels, and date ranges for your uploaded data)

indexeddb

your processed listening statistics and play events are stored in your browser's indexeddb, organized by profile. this allows you to return to your results anytime without re-uploading. if you have multiple profiles (e.g. separate spotify and apple music data), each is stored independently. you can clear this data through the "my profiles" tab or through your browser settings. this data stays on your device.

we request persistent storage from your browser (via the storage api) so that your data is not automatically deleted between visits. this does not grant us any additional access to your device. you can revoke this at any time by clearing site data in your browser settings.

geocoding

when you enter a birth place for the star songs feature, it is sent to openstreetmap's nominatim geocoding service to convert the city name to geographic coordinates. only the city name is sent, no other personal information. subject to openstreetmap's privacy policy.

timezone

your browser's timezone is used to infer your hemisphere for seasonal listening breakdowns. this information is not stored or transmitted.

cookies

seasons of your life uses minimal cookies:

• theme preference cookie (moonpath_theme): stores your light/dark mode choice so it carries over across moonpath.dev sites. set on the .moonpath.dev domain, contains only "light" or "dark", expires after one year. not used for tracking.

we do not use advertising cookies, tracking cookies, or tracking pixels. for full details, see our cookie policy.

analytics

we use google analytics 4 (ga4) and vercel analytics to understand how visitors use seasons of your life and improve the experience.

google analytics 4

ga4 collects:

• page and usage data: pages visited, time on page, browser type, device type, and operating system.
• interaction events: we track specific actions to understand how people use the experience. this includes events like: signing up via the email gate, connecting to spotify, viewing different tabs (eras, seasons, discover, star songs), generating share sheets, and completing the experience. these events help us identify where users encounter issues and which features are most valued.
• funnel tracking: we track the sequence of steps users take through the experience (landing page, email signup, spotify connection, data loading, exploring results). this helps us identify where people drop off so we can improve those steps. no personal information or spotify data is included in these events.
• share tracking: when you share your results (via the share button, download, or copy link), we record the share action and which type of result was shared. we do not track who receives your share or what they do with it. share links may contain a short tracking parameter (e.g., ?ref=share_eras) so we can measure how many new visitors arrive via shares.
• outbound link clicks: when you click a link that leaves seasons.moonpath.dev (such as a spotify link or ko-fi), we record the click destination and context. we do not track your activity on the destination site.
• traffic source data: we record how you arrived at seasons.moonpath.dev, including the referring website and any utm campaign parameters in the url. this helps us understand which channels bring visitors.
• approximate location: ga4 infers your approximate geographic location (city and country level) from your ip address. we do not see or store your ip address directly.

ga4 uses cookies to distinguish unique visitors. you can opt out by using the google analytics opt-out browser add-on.

no spotify listening data is ever included in analytics. your listening history, artist names, track names, and play counts are never sent to google analytics, vercel analytics, or any analytics service.

subject to google's privacy policy.

vercel analytics

vercel analytics is privacy-focused, does not use cookies, and does not collect personal data. it provides aggregate page view and performance metrics only. subject to vercel's privacy policy.

session storage

during your visit, traffic source information (referring website, utm campaign parameters, landing page) is stored temporarily in your browser's session storage. this data is automatically cleared when you close your browser tab or browser. it is used solely to attach traffic source context to analytics events and is not persisted between sessions.

email delivery

transactional emails (confirmations, access notifications, purchase receipts) and newsletters are sent via resend. your email address is shared with resend for delivery purposes only. subject to resend's privacy policy.

replies to our emails are forwarded via improvmx to our inbox at hello@moonpath.dev.

third-party services

data processing agreements

we maintain data processing agreements with all service providers. details available upon request at hello@moonpath.dev.

data retention

your email address and account status are retained for as long as your account is active. email delivery logs are retained for operational purposes. you may request deletion at any time.

data deletion

to request deletion of your email address and all associated account data, email hello@moonpath.dev. we will process your request within 30 days. browser-stored data (local storage, indexeddb) can be cleared directly through your browser settings.

gdpr (european users)

if you are located in the european union, you have the right to:

• access the personal data we hold about you
• request correction of inaccurate data
• request deletion of your data
• object to or restrict processing of your data
• data portability

to exercise any of these rights, contact hello@moonpath.dev.

ccpa (california users)

if you are a california resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you. we do not sell personal information. to make a request, contact hello@moonpath.dev.

children's privacy

seasons of your life is not directed at children under 13. we do not knowingly collect information from children under 13.

changes to this policy

we may update this policy from time to time. changes will be reflected by updating the "last updated" date.

contact

for privacy-related questions, email hello@moonpath.dev or use our contact form.