The playlist you import: song titles, artists, albums, years, album art links, and a colour derived from each cover.
What you write: the title, the dedication, and your notes.
Your Spotify account id, so a draft can be matched to the person who made it.
What is not stored
Your Spotify password. You never type it into Goes Out — you sign in on Spotify’s own site.
Long-lived Spotify credentials. The refresh token Spotify offers is discarded on arrival; only a short-lived read token is used, and only while an import runs.
Payment details. There is nothing to pay for.
Who can see a page
A page is reachable by anyone who has its address, and is not listed, indexed by default, or searchable from within Goes Out.
Drafts are private to whoever holds the edit link.
Getting it removed
Write to hello@goesout.to and a page and everything imported with it will be deleted.