Privacy statement

Your music taste is personal. We believe your listening history, album ratings, and musical discoveries should belong to you.

One More Listen is designed to help you discover great albums, understand your musical taste, and build a lasting record of your listening journey.

To do that, we collect and store certain information about you. This privacy statement explains what we collect, why we collect it, how we protect it, and what control you have over it.

Our commitments are simple:

• We never sell your personal information.
• We don’t display advertisements or use advertising trackers.
• Your ratings, listening journal, and recommendations are private.
• You can download your personal data or delete your account.
• We collect information to improve your listening experience, not to build an advertising profile.

One More Listen is an independent music discovery service. One More Listen is developed and operated in Oslo, Norway.

For questions about privacy, personal information, or your rights, please contact us at email@onemorelisten.com.

We collect information necessary to operate One More Listen, personalize your recommendations, and improve the service.

Your account

When you create an account, we store:

• Your email address.
• Your password, if you choose password-based authentication. Passwords are stored as secure, one-way hashes, never as readable text.
• The invitation code used to create your account during the beta.

You can sign in using a one-time email link or your email address and password.

We also maintain information about your active sessions, including your browser type, sign-in time, recent activity, and session expiration.

You can manage and end active sessions through Settings.

Your music taste

The heart of One More Listen is your personal music profile.

To understand your taste and provide meaningful recommendations, we store:

• Album ratings: Albums you’ve rated, your scores, and when ratings were created or changed.
• Saved albums: Albums you’ve marked for future listening.
• Dismissed albums: Albums you’ve indicated you’re not interested in.
• Listening journal: Albums you’ve listened to, listening dates, and any personal notes you’ve written.
• Genre preferences: Genres you’ve selected or expressed an interest in.
• Taste comparisons: Your choices during onboarding and album comparison activities.

This information helps us identify patterns in your listening preferences and recommend albums you’re more likely to appreciate.

Your music profile is private. Other members cannot see your ratings, journal entries, or personal recommendations.

Your Daily recommendations

We store information about the recommendations generated for you, including:

• Which albums were recommended.
• Why each album was recommended.
• When recommendations were displayed.
• Whether you opened, rated, saved, or dismissed an album.
• Your reasons for dismissing recommendations, when provided.
• Your five daily album selections.

This information helps us improve future recommendations and avoid repeatedly suggesting albums you’ve already considered.

Imported music libraries

One More Listen allows you to import music information from external sources, including Spotify exports, ListenBrainz, M3U playlists, and CSV files.

When you upload a file, it is processed locally in your browser. The original file is not uploaded to our servers.

We receive only relevant album-level information, such as:

• Artist and album names.
• Your existing ratings, where available.
• The number of times you’ve listened to an album.
• The date you last listened to an album.

We don’t track what you listen to in Spotify or other services. When you press Play in One More Listen, we note which album, where in the app you pressed it, which service it opened, and when. We never see what you actually play there.

Searches and missing albums

When you search for an album, import a library, or paste a list that contains albums we cannot identify, we may store limited information about the unsuccessful search.

This includes:

• The search text, limited to 200 characters.
• Whether the search came from a direct search, pasted list, or imported file.
• The closest suggested match, if available.
• The date of the search.

We use this information to identify missing albums and improve our music catalogue.

Only the One More Listen team can access these records. Reports use aggregated counts rather than identifying individual members.

Unsuccessful search records are automatically deleted after the retention period specified by the service. They are also included in your personal data export.

Important: Search text is stored as entered. Avoid including sensitive personal information in searches or imported album titles.

Your preferences

We store settings you choose, including:

• Preferred streaming services.
• Preferences for new releases versus older albums.
• Email notification preferences.
• Preferred email delivery times.

These settings help us tailor the service to your preferences.

We use personal information for the following purposes.

We do not use your personal information for targeted advertising.

We do not sell your listening history, ratings, or personal information to data brokers, advertisers, or other third parties.

We use PostHog to understand how people use One More Listen and identify opportunities to improve the experience.

PostHog is configured to use its European cloud infrastructure.

We collect a limited set of usage events, such as:

• When a recommendation is displayed or opened.
• When an album is rated, saved, or dismissed.
• When someone follows a link to a streaming service.
• Which onboarding steps are completed.
• Which keyboard shortcuts are used.

For streaming links, the event may include the album and streaming service.

We do not send your name, email address, or account ID to PostHog.

Instead, PostHog uses an anonymous browser identifier to recognize usage patterns.

Automatic page tracking and click recording are disabled.

We use this information exclusively to improve One More Listen. It is not sold or shared for advertising purposes.

We use Sentry to identify and investigate technical problems.

When an error occurs, Sentry may receive information about the error and the technical environment in which it occurred.

This can include:

• Error messages.
• The affected page.
• Browser and operating system information.
• Technical diagnostic information.

Selected error summaries are also copied to Plane, our internal development and issue-tracking system.

Before information is copied to Plane, identifying details are removed. These summaries do not contain your name, email address, IP address, or account ID.

We use error reports solely to maintain and improve the reliability of the service.

We use Resend to deliver account-related messages and optional music updates.

Resend receives your email address and the content of messages sent to you.

Account emails

These include:

• Sign-in links.
• Account confirmation messages.
• Password-reset links.

These messages are sent when necessary to operate your account or when you request them.

Music discovery emails

Depending on your preferences, you may receive:

Your Daily is ready

A morning email introducing your daily album recommendations, delivered at your preferred time.

Your week in albums

A Sunday summary of your listening activity and discoveries.

New from your top artists

Notifications about new releases from artists relevant to your musical taste.

Recurring music emails are enabled by default for new accounts.

You can disable each category independently through Settings → Email preferences.

Every recurring email also contains a link to your email settings.

We record when emails are sent to prevent duplicate deliveries.

One More Listen combines music information from several public, open, and commercially licensed sources.

These sources help us build our catalogue, understand musical relationships, and generate recommendations.

We respect the rights of music publishers, artists, and other content owners.

Where we reference critical reviews, we store relevant facts, such as scores, dates, publications, and source links, rather than reproducing the original review text.

Album artwork remains the property of its respective rights holders.

The music catalogue itself generally contains information about albums and artists rather than personal information about our members.

We use specialized technology providers to operate One More Listen.

These companies process limited information on our behalf, according to their respective roles.

Our primary application database and background processing infrastructure are located in Frankfurt, Germany.

We do not permit these providers to use your personal information for their own advertising.

One More Listen uses a limited number of cookies and browser storage mechanisms.

We do not use advertising cookies.

Essential cookies

These cookies are required for authentication and account security.

Your session can remain active for up to 90 days.

When signing in with a password without selecting “Stay signed in,” the session lasts one day.

Essential authentication cookies are necessary to use an account.

Analytics storage

PostHog stores an anonymous identifier using a first-party cookie and browser local storage.

This allows us to understand usage patterns without sending your account identity to PostHog.

Analytics storage is separate from authentication.

Local browser preferences

We also use browser storage for convenience, including:

• Recently searched albums.
• Whether your first Daily recommendations have been displayed.
• Temporary session markers related to your first Daily.

These preferences remain in your browser and are not transmitted to our servers.

We retain personal information only for as long as necessary for the purposes described in this statement, subject to the specific retention practices below.

Account and music data

Your account information, album ratings, listening journal, preferences, and recommendation history remain stored while your account exists.

When you delete your account, the information associated with it is permanently removed from our active database.

Account deletion cannot be reversed.

Authentication sessions

Sessions expire automatically or can be ended manually through Settings.

Unsuccessful searches

Searches that could not be matched to albums are automatically deleted after the configured retention period.

Password-reset information

Password-reset links expire after one hour and can be used only once.

Security logs and waiting lists

Authentication attempts are logged to help prevent unauthorized access and abuse.

These records may include:

• The email address entered.
• IP address.
• Time of the attempt.
• Whether authentication succeeded.

Authentication attempt logs and waiting-list email addresses currently have no automatic deletion schedule. They are retained until manually removed.

We intend to establish defined retention periods before the final privacy statement takes effect.

Analytics and error reports

Analytics, technical error reports, and email delivery logs are subject to retention settings maintained by their respective providers.

Their exact retention periods will be confirmed in the final statement.

Backups

We maintain limited database backups for disaster recovery.

Automatic backups created before database schema updates are normally deleted after seven days.

Our database provider also maintains a short recovery history.

As a result, information deleted from the active database may remain temporarily in backups.

These backups are maintained exclusively for recovery purposes and are not used for normal application operations.

If you live in the European Economic Area, the General Data Protection Regulation (GDPR) provides you with important rights concerning your personal information.

These include the right to access, correct, erase, and, in certain circumstances, restrict or object to the processing of your personal information.

You may also have the right to receive certain information in a portable format.

Access your information

You can download your personal data through:

Settings → Your data

Available exports include:

• A JSON file containing the personal information associated with your account.
• A CSV export of your listening journal.

For security reasons, authentication credentials such as password hashes and session tokens are not included in the standard export.

Correct your information

You can update your ratings, journal entries, preferences, and other editable information directly in One More Listen.

For information you cannot change yourself, contact us.

Delete your account

You can permanently delete your account through:

Settings → Your data → Delete account

You will be asked to confirm the deletion by entering your email address.

Deleting your account removes your account information and associated music data from the active database.

Certain information may remain temporarily or separately, including:

• Security-related authentication logs.
• Waiting-list entries.
• Temporary database backups.
• Anonymous analytics events that cannot be linked to your account.
• Administrative audit records, where applicable.

Invitation codes are retained without their previous association with your account.

Object to processing or request restrictions

You may contact us to object to certain uses of your information or request that processing be restricted where applicable under GDPR.

We will review these requests in accordance with applicable law.

File a complaint

If you believe your personal information has been handled improperly, you may contact the Norwegian Data Protection Authority:

Datatilsynet

You may also contact us directly so we can investigate your concern.

For security and accountability, One More Listen maintains an audit log of actions performed through its internal administration dashboard.

These records include:

• The administrator responsible.
• The action performed.
• The date and time.
• Browser information.
• A one-way hash of the administrator’s IP address.

Administrative audit logs are retained permanently.

They concern administrator activity rather than ordinary member activity.

Accounts associated with permanent administrative audit records cannot currently be deleted through the standard Settings interface.

We may update this privacy statement as One More Listen develops, new features are introduced, or our legal obligations change.

When we make meaningful changes affecting how personal information is collected or processed, we will notify registered members by email.

The latest version will always be available on our website.

For questions about privacy, data protection, or your rights, please contact the One More Listen team at email@onemorelisten.com.

We welcome questions about how your information is used and will respond to privacy requests in accordance with applicable law.