Privacy Policy
Last updated: 8/6/2025
What We Do
Inmural is a web application that creates visual murals from your Spotify music library. We connect to your Spotify account to access your top tracks and create personalized album cover grids.
Data We Access
We request the following permissions from Spotify:
- user-top-read: Access to your top artists and tracks to create your mural
We only request the minimum permissions needed to provide our service. We do not access your playlists, saved music, or any other personal data beyond your top tracks.
How We Handle Your Data
- We do not store your personal information on our servers
- We store temporary access tokens in secure, httpOnly cookies that cannot be accessed by JavaScript
- We fetch your top tracks data only when you generate a mural
- Album artwork and metadata are provided directly by Spotify
- We do not sell, share, or distribute your data to third parties
Your Control
You have full control over your data:
- You can disconnect your Spotify account at any time using the “Logout” button
- When you logout, all stored tokens are removed from your browser
- You can revoke our access through your Spotify account settings
- No data persists after you disconnect your account
Third-Party Services
We use Spotify's Web API to access your music data. Your use of Spotify is governed by Spotify's Privacy Policy and Terms of Service.
Security
We use industry-standard security measures including HTTPS encryption, OAuth 2.0 with PKCE for secure authentication, Content Security Policy headers, and secure httpOnly cookies. We do not store passwords or sensitive personal information.
Contact
If you have questions about this privacy policy, please contact us through our GitHub repository.