Privacy Policy

Last updated November 2, 2026

Vyl is a music player at vyl.vercel.app that plays music from Spotify and YouTube. This policy explains what Vyl can see, what it does with it, and how to remove its access.

In short

• Vyl has no accounts of its own and keeps none of your data on its servers.
• Your Spotify and YouTube sign-ins are stored only in your own browser.
• Vyl only reads your YouTube account. It can't change anything in it.
• Vyl never sells or shares your data, and never uses it for ads.

YouTube and your Google account

Vyl uses YouTube API Services. When you sign in with Google, Vyl asks for read-only access to your YouTube account (the youtube.readonly permission) and uses it only to:

• list your playlists and liked videos, and the videos in them, so you can play them in Vyl;
• search YouTube for music when you use Vyl's search.

This information is shown only to you, on your screen. Videos play in YouTube's own embedded player. Vyl doesn't store your YouTube data on its servers, doesn't share or sell it, and doesn't use it for advertising.

The sign-in tokens Google issues are kept in your browser's local storage. Vyl's server only passes them between your browser and Google to finish and renew your sign-in; it doesn't save them.

Vyl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you use YouTube in Vyl, the YouTube Terms of Service and the Google Privacy Policy also apply.

Removing access: tap Sign out on Vyl's YouTube page to delete the sign-in from your browser. To revoke Vyl's access to your Google account completely, remove Vyl on Google's security settings page.

Spotify

When you connect Spotify, Vyl gets permission to read your profile, playlists, library, top and recently played tracks, see what's playing, and control playback, so it can show your music and play it. Your Spotify sign-in is stored in your browser, and Vyl's server only uses it to finish and renew the sign-in. You can remove Vyl's access in your Spotify account settings.

What's stored in your browser

• Your Spotify and YouTube sign-in tokens
• The YouTube links you played recently
• Settings such as "Play here automatically" and TV mode

Signing out, or clearing this site's data in your browser, deletes them.

Analytics and hosting

Vyl may use PostHog to count visits: the pages you open, which buttons are used, the type of browser and device, and an approximate location based on your IP address. On-screen text, such as song and playlist names, and sign-in codes are never sent. Vyl is hosted on Vercel, which keeps standard request logs (IP address and browser).

Children

Vyl isn't meant for children under 13.

Changes and contact

If this policy changes, the date at the top changes too. Questions: jnsgumban@gmail.com.

Privacy Policy · Terms of Service