Privacy policy
What hoploop stores, why, and how to have it deleted.
Last updated: October 26, 2026
Who looks after your data
The person responsible for your data on hoploop is Gustavo Victor, an individual who runs the app. For questions or requests to access, correct or delete your data, write to privacidade@hoploop.app.
What we store
The name, email and profile picture of the Google account you sign in with. The access tokens of the services you connect, encrypted, and your Last.fm username if you connect it. Your scheduled syncs, your sync history and the matches you confirmed, so the next sync doesn't search again. The titles of the tracks in the playlists you open, for the search inside the app. The date of your last visit and your language, to pause scheduled syncs after 90 days without use and to write to you in your language. If you save an AI key, the encrypted key, the provider and the model. If you connect Spotify or YouTube through your own app, its Client ID and, for Google, its Client Secret, encrypted. How far you got in the tour and in the home page checklist, and the services you tapped “Let me know” on. For track genres: the genre hoploop found for each track, stored once per track (by ISRC, or by artist and title when there is no ISRC), not linked to your account and shared among everyone who uses the app; genre tags that no source recognized, only the tag text, to improve the genre list; and, linked to your account, each genre correction you make.
YouTube API Services
When you connect YouTube, hoploop uses YouTube API Services to read and edit your playlists. By using it you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy. Data obtained from YouTube is deleted or refreshed within 30 days. You can revoke hoploop's access at any time in your Google account permissions.
Spotify
When you connect Spotify, hoploop reads and edits your playlists through the Spotify Web API. You can revoke the access at any time in your Spotify apps.
How it is used
Only to run the features you use: reading playlists, matching tracks and writing them where you choose. hoploop doesn't sell your data, doesn't show ads and only passes data to the services you connect and to the ones that keep the app running, listed below.
AI with your own key
Saving an AI key in Settings turns on title parsing right away: in syncs that start from YouTube, each video title and channel name go to the provider you picked, with your own key. If you ask for the AI review after a sync, it gets the written track pairs (source and destination, with the match score) and the destination playlist name. The answer shows on screen and is not stored. Removing the key turns both off.
Who processes the data
Some services keep hoploop running: Vercel hosts the app and keeps technical access and error records (logs); Neon hosts the database; Resend sends the email telling you your scheduled syncs were paused for inactivity, with your name and email; and, to find track genres, hoploop queries public music sources, even if you haven't connected an account on any of them. Last.fm receives the artist name and the track title. MusicBrainz receives the ISRC, or the title and artist, and the album name. Wikidata receives the artist's Spotify ID (when there is one), the artist name, the track title and the ISRC. Discogs, when enabled, receives the artist name and the album name (or the track title). None of them receives your name, email or user ID; Spotify receives only the artist ID, with your token, if you connected it.
Public links
When you share your recap or your first sync achievement, hoploop creates a public link. The content goes inside the link itself, unencrypted: your first name and the recap tracks and artist, or the playlist name, how many tracks were written and the time it took. Anyone with the link can read it, and the link is permanent: it doesn't expire and doesn't go away when you delete your account. Only share what you want to make public.
Cookies
A session cookie to keep you signed in, one for your language and short-lived ones during sign-in. No tracking or advertising cookies.
Browser storage
hoploop also keeps a few things in your browser's local storage, only so the app works: the theme, whether you have seen the intro, the step of a setup assistant, the Organize scan and labels, and today's radio. None of it is tracking or advertising. When you sign out or delete your account, what belongs to your account is removed from the browser.
Deleting your data
Settings > Profile > Delete my account erases everything listed under “What we store” at once. Public links you already shared keep working, as explained above. Disconnecting a service erases its tokens. Any deletion request is completed within 7 days.
Changes
If this policy changes, the date at the top changes with it.