World Congress 2026 Europe β€’ Jul 10, 2026 β€’ Session details

The Sound of Privacy – What Your Spotify Data Reveals About You

Dennis Schulz , Thomas Hugle

Think Spotify only reveals your taste in music? Discover how hidden app metadata exposes your exact physical locations, daily routines, and intimate life changes.

Pause
Mute Enter Fullscreen
#1 about 4 min

Requesting personal data through European privacy regulations

Three specific rights granted by the GDPR force companies to provide accessible and portable user data.

#2 about 2 min

Navigating the data request and download process

The procedure for exporting user information includes triggering a privacy portal request and downloading categorized archives.

#3 about 2 min

Extracting basic patterns from account listening history

Standard user account tables reveal track history, playlist updates, and skipped media over short recent timeframes.

#4 about 2 min

Exposing sensitive information through partial search logs

Stored keystroke data reveals search habits and potentially leaks accidentally typed passwords.

#5 about 4 min

Uncovering hidden behavioral metrics in extended histories

The extended metadata logs expose long-term histories including network locations, offline behavior, and incognito sessions.

#6 about 3 min

Reconstructing device ownership and hardware lifecycles

Client platform metadata allows analysts to trace a timeline of primary smartphones, media players, and operating systems.

#7 about 2 min

Detecting account sharing via distinct usage behaviors

Comparing track skip ratios across different connected devices highlights when multiple people share a single profile.

#8 about 3 min

Inferring critical hardware failures from usage timelines

Identifying rapid regressions to older mobile devices indicates unexpected hardware damage or replacement periods.

#9 about 3 min

Mapping sleep cycles and lifestyle changes over time

Aggregating playback activity against daily hours reveals shifting work routines, sleep disruptions, and pandemic lockdowns.

#10 about 3 min

Tracking daily locations through linked network addresses

Geolocating frequent IP networks correlates habits with strict university or workplace schedules and stressful deadlines.

#11 about 3 min

Constructing comprehensive international travel chronologies from metadata

Analyzing country codes and distinct provider addresses constructs a detailed matrix of past vacations and global movement.

#12 about 4 min

Evaluating the accuracy of corporate behavioral profiling

Extracted audience segmentation flags demonstrate how platforms attempt to predict user preferences and personal social behaviors.

Matching moments

2:53 min

Real world case studies of model privacy failures

Aditi Godbole Β· LIVE

2:12 min

Navigating data regulations and the future of mobility

Tonci Zilic Β· WWC 2022

55 sec

Exploitation of data in the information revolution

Phil Bennett Β· WWC 2021

3:26 min

Personal use cases and data privacy boundaries

Annabella Bassler Annabella Bassler +3 Β· WWC Europe 2026

5:34 min

Addressing audience concerns on licensing and privacy

Thomas Dohmke Thomas Dohmke Β· WWC 2022

6:27 min

Examining privacy risks posed by browser extensions and tracking

Chris Heilmann +2 Β· LIVE

Upcoming sessions on this topic

Open session

World Congress 2026 North America

GitHub’s Team X-Ray: Your Repository Knows More About Your Team Than Your Team Does

Andrea Griffiths

Senior Developer Advocate

Andrea Griffiths
Open session

World Congress 2026 North America

Proactive AI That Doesn’t Annoy Users: Building Context-Aware Notification Systems

Raju Dandigam Dandigam

Engineering Manager at Navan

Raju Dandigam Dandigam
Open session

World Congress 2026 North America

When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale

Yoav Gal, Dor Cohen

Yoav Gal
Dor Cohen
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

From Guesswork to Governance: Data Contracts Bring API Discipline to Apache Kafka

Sandon Jacobs

Senior Developer Advocate at IBM

Sandon Jacobs