What is shown
Only the information needed to identify the item being played: title, artist or creator, album or show, artwork supplied by Spotify and a link back to the content on Spotify.
What does not happen
The HUB does not play or copy Spotify audio, does not control playback, does not expose devices and does not build a public listening-history database. When there is no active playback, the Home module simply does not appear.
How the connection works
The Home page queries a HUB endpoint. That endpoint accesses the official Spotify API with read permission for Marcelo's own account. Private credentials are not stored in the site's public code; they are kept as Cloudflare Worker secrets, while the refresh token is stored in Workers KV.
Visitors
Visitors do not connect their Spotify accounts to the HUB and this integration does not request Spotify account data from visitors. Opening an item from the module sends the visitor to the Spotify service.
Maintenance and disconnection
Spotify authorization has a limited lifetime and must be renewed periodically. Marcelo can also disconnect the integration and delete the tokens stored by the Worker. If authorization is absent, only the module disappears; the rest of the site remains independent of this integration.