MusicSpan Privacy Policy – Consilience Advisory, LLC

MusicSpan

Privacy Policy

Effective October 6, 2026 · Consilience Advisory, LLC (Virginia), maker of MusicSpan

In short: MusicSpan runs on your own computer, NAS and phone. We – Consilience Advisory – don’t run a MusicSpan cloud service and don’t receive your music, playlists or account information. If you link YouTube, MusicSpan can only read it, keeps that access on the MusicSpan server in your home, and never sells or shares it. You can unlink at any time.

Who runs what

MusicSpan has three parts: the Windows app, the MusicSpan Server that a household runs on its own network storage (NAS), and the Android app. The person who sets up the server (the owner) decides who may use it. Information described below is stored on that household’s own devices and server – not on computers run by Consilience Advisory.

Information MusicSpan uses

Your music library

MusicSpan reads the music files you point it at, along with their tags, artwork and play history, to play, organize and improve your library. This stays on your computer and your server.

People and devices (Friends & Family)

When the owner adds someone, the server keeps their name, the Google account e-mail address and mobile number the owner enters, and a record of each device they sign in with (the device model, a one-way coded device identifier, and when it was last seen). This is used only to let that person – and only on their approved devices – listen, and to let the owner send them a sign-in link. Mobile numbers are used only to start a text message from the owner’s own phone; MusicSpan does not send texts.

Google user data (YouTube)

If a person chooses to link their YouTube, Google asks them to allow MusicSpan these permissions:

View your YouTube account (youtube.readonly) – MusicSpan reads the person’s YouTube channel name, their playlists and the videos in them, and their liked videos, plus each video’s title, channel, category and whether it may be played outside YouTube. This is used only to show that person their own playlists in MusicSpan and to play those songs.
Your e-mail address – used only to confirm which Google account was linked and to show it to that person.

MusicSpan never uploads, posts, deletes or changes anything on YouTube. The Google access (a “refresh token”) and what was read are stored only on the household’s MusicSpan Server; they are not sent to the person’s other apps, to other members, or to Consilience Advisory. Each person’s YouTube playlists are shown only to that person.

Lookups on the internet

To find lyrics, artwork, artist details and song information, MusicSpan sends song titles, artist and album names to public music services (such as MusicBrainz, Cover Art Archive, LRCLIB, Wikidata/Wikipedia, Deezer, Apple iTunes Search, fanart.tv Last.fm and Odesli/song.link). These requests don’t include your name, e-mail or account details. Remote access to the server goes through Tailscale, a private network service, if the owner sets it up.

Google API Services – Limited Use

MusicSpan’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the features described above; it is not used for advertising, not sold, not used to build profiles, and not read by people except where the person whose data it is asks for help, where needed for security, or where the law requires.

MusicSpan uses YouTube API Services. See the YouTube Terms of Service and the Google Privacy Policy.

Sharing

We don’t sell or rent personal information, and MusicSpan doesn’t share it with advertisers or data brokers. Information leaves your household only as described above (music lookups by song name; Google and Tailscale when you use them).

Keeping and deleting information

Unlink YouTube (My YouTube ▸ Unlink): MusicSpan deletes the person’s YouTube playlists and access from the server and asks Google to end the access.
Removing a person (Friends & Family ▸ Remove): their devices are signed out and their YouTube is unlinked; where the owner uses Tailscale, their devices are later removed from the household’s private network too.
You can also end MusicSpan’s access to your Google account at any time at myaccount.google.com/permissions.
Everything else lives on the household’s own devices; deleting MusicSpan and its data folders removes it.

Security

The MusicSpan Server answers only on the household’s home network or a private VPN the owner allows. Device keys are stored only as one-way codes, each person’s devices must be approved, and the server never sends Google access tokens to any app.

Children

MusicSpan isn’t directed to children under 13, and we don’t knowingly collect their information. A household owner who lets a child listen is responsible for doing so, and can turn on Clean only listening.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Consilience Advisory, LLC · elijah.salters@consilienceadvisory.com