Privacy Policy

Last updated: May 1, 2026

Introduction

Sortune ("we", "us", "our") operates the sortune.com website. This Privacy Policy explains what data we access, how we use it, and your rights.

Data we access

When you sign in with Google, we access:

  • Your Google account profile (name, email, avatar) — used for authentication
  • Your YouTube Music library (playlists, liked videos) — accessed via YouTube Data API v3
  • AI-classified genre data for your tracks — stored in our database when you use the MCP integration
Data we store

We store minimal data in our database:

  • Your authentication session (managed by better-auth)
  • MCP API tokens you generate for AI agent access
  • AI-classified genre metadata for your tracks (video ID, artist, title, genres)

We do NOT store your music files, listening history, or YouTube passwords.

YouTube API usage

Sortune uses YouTube Data API v3 to read and manage your playlists. By using Sortune, you agree to be bound by Google's Terms of Service and Privacy Policy. You can revoke Sortune's access at any time via your Google Account permissions page.

MCP API access

When you generate an MCP token, third-party AI agents you authorize can access your YouTube Music library through Sortune. You control which agents have access and can revoke tokens at any time from Settings.

Cookies

We use essential session cookies for authentication. We do not use tracking cookies, analytics, or advertising cookies.

Security

All data is transmitted over HTTPS. OAuth tokens are stored securely in our database. MCP tokens are hashed and can be revoked at any time.

Your rights

You can:

  • Revoke Sortune's access to your Google account at any time
  • Delete your MCP tokens from the Settings page
  • Request deletion of all your data by contacting us
Contact

For privacy questions, contact us at sortune.app@gmail.com.

0:00--:--