Privacy

Playmyhead shows what you’re listening to on a page you control. This is what it stores and why.

Your account

Username, email (only for signing in, never shown), a hashed password (Argon2), and your display name and page settings.

What the browser extension sends

Only while you’re signed in and “On air” is on, and only from music sites you’ve enabled: the track’s id, title, artist, link, cover-art link, whether it’s playing, its position and length. Nothing about other tabs, your browsing history, or pages you visit. With “Music only” on, YouTube videos that aren’t music are skipped. Ads are never sent.

History and stats

Each track you play is kept with when it started and how long you listened, to show “Recently played” and your stats. Reactions and track requests visitors send are stored with the track, without their identity.

Who sees it

Your page is public, unlisted (link only) or private, as you choose on the dashboard. Stats follow the same setting and can be hidden in Customize.

Connected services

If you connect Last.fm or ListenBrainz, your plays are sent there. If you connect Spotify, the server reads what’s currently playing on your account every few seconds. Disconnect any of them on the dashboard; the stored keys are deleted.

Cookies

One sign-in cookie. No ads, no third-party trackers. Listen-along loads YouTube’s player, which follows YouTube’s own privacy policy.

Deleting

Revoke devices and tokens on the dashboard at any time. To delete your account and all its data, contact the operator of this server.