"Secret" (private) playlists are embeddable on a website: Bug or feature?

[atmo]

Hello community!

This is more of a developer-related issue so please feel free to redirect me to the appropriate channel/website/community for this to get an answer.

I have noticed that playlists that are "secret" can still be embedded, thus made accessible, with the Spotify Play button (https://developer.spotify.com/documentation/widgets/guides/adding-a-spotify-play-button/)

I would have thought that "secret" playlists are… well, absolutely secret 😅

But apparently, if you have direct access to a playlist link, like https://open.spotify.com/user/[user_id_here]/playlist/[playlist_id_here], you can embed it without any question on a website, and the so-called "secret" playlist becomes, well, visible by everyone.

Is that by design? Is that a bug or a feature?

I just want to check whether this is an ongoing issue that might be fixed anytime soon, or if it is a design decision for the Spotify database/API schemes.

Thanks for considering my request

[Jemi · Accepted solution]

Hey @atmo, help's arrived.

Any developer-related questions are best handled by the folks over here. Or, if you'd prefer you can tweet them at @SpotifyPlatform. They should be able to look into this more.

Hope that helps 🙂

[atmo]

Thanks @Jemi, will post my question there! 🙂