Running Spotify on a Kid’s phone, without the age restriction

Recently I bought Spotify’s family plan, only to find out that I can not install the Spotify app on their phone from the Google Play Store at all. Not to mention, that the Spotify Kids app is not available in my region, too. WHAAAT?

Restrictions

There are actually two restrictions: Children under 13 are not only disallowed to load the app from the app store, they also can not get an account from Spotify. Depending on country, that is: Per the End User Agreement, in Switzerland, for example, the requirement is:

Must be 18 or older, or be 13 or older and have parent or guardian consent.

While I did not want to cheat on the age of the Google Account (for Family Link reasons), I decided to get an account for each of my kids with a “custom” age value. With this, they can still use the web player, which is quite decent.

Solution

Here’s what I have done:

  • Subscribe to the Spotify Premium Family plan with my own account
  • Create new accounts for each of the kids, with their birthday set to make them over 18
  • Link the kid’s accounts to the family plan
  • Load spotify on their phone’s webbrowser (Google Chrome in this case)
  • Log them in on the website
  • Create a link on the Home screen which they can use

With this they can now each listen to their favorite tracks on my family plan.

The only drawback is that the playback is sometimes a little bit flaky, when the phone gets into lock mode.

Customizing the firewall

To protect my family I use a pfSense firewall. However, I want to allow to listen to Spotify’s music at all times, even after bedtime. So I created some special “allow” rule above the various restrictions:

Allow all traffic (IP4+IP6) from the LAN Interface, wich goes to spotify.

pfSense rule to allow traffic for the spotify web player

For the IP addresses I created a special alias “spotifyweb” of type “Host(s)” which contains all relevant FQDN’s. (I gathered them with a network traffic logger):

api.spotify.com
app.adjust.com
apresolve.spotify.com
audio-akp-quic-spotify-com.akamaized.net
audio-fa.scdn.co
audio-sp-fra2.spotifycdn.net
cdn.ravenjs.com
daily-mix.scdn.co
dailymix-images.scdn.co
dealer.spotify.com
exp.wg.spotify.com
gae2-accesspoint-b-0l9g.ap.spotify.com
gae2-accesspoint-b-2kjw.ap.spotify.com
gae2-accesspoint-b-6f7n.ap.spotify.com
gae2-accesspoint-b-6spv.ap.spotify.com
gae2-accesspoint-b-9jr6.ap.spotify.com
gae2-accesspoint-b-frpp.ap.spotify.com
gae2-accesspoint-b-nfnq.ap.spotify.com
gae2-accesspoint-b-t3lg.ap.spotify.com
gew-dealer.spotify.com
gew-dealer.spotify.com
gew-spclient.spotify.com
gew1-accesspoint-a-dswg.ap.spotify.com
gew1-accesspoint-a-gd6s.ap.spotify.com
gew1-accesspoint-a-rdmq.ap.spotify.com
gew1-accesspoint-a-rp1l.ap.spotify.com
gew1-accesspoint-b-0rjz.ap.spotify.com
gew1-accesspoint-b-0vp0.ap.spotify.com
gew1-accesspoint-b-3kv9.ap.spotify.com
gew1-accesspoint-b-3×12.ap.spotify.com
gew1-accesspoint-b-40dm.ap.spotify.com
gew1-accesspoint-b-5039.ap.spotify.com
gew1-accesspoint-b-5s7r.ap.spotify.com
gew1-accesspoint-b-7l77.ap.spotify.com
gew1-accesspoint-b-c19m.ap.spotify.com
gew1-accesspoint-b-crv4.ap.spotify.com
gew1-accesspoint-b-h4gk.ap.spotify.com
gew1-accesspoint-b-h9pt.ap.spotify.com
gew1-accesspoint-b-hlvr.ap.spotify.com
gew1-accesspoint-b-hmkp.ap.spotify.com
gew1-accesspoint-b-j6dc.ap.spotify.com
gew1-accesspoint-b-jgtv.ap.spotify.com
gew1-accesspoint-b-pbp0.ap.spotify.com
gew1-accesspoint-b-r749.ap.spotify.com
gew1-accesspoint-b-s68v.ap.spotify.com
gew1-accesspoint-b-slc1.ap.spotify.com
gew1-accesspoint-b-t23g.ap.spotify.com
gew1-accesspoint-b-vjwd.ap.spotify.com
gew1-accesspoint-b-wj99.ap.spotify.com
gew1-accesspoint-b-x3zx.ap.spotify.com
guc3-accesspoint-b-hlk6.ap.spotify.com
guc3-accesspoint-b-nst8.ap.spotify.com
guc3-accesspoint-b-zxmx.ap.spotify.com
heads-fa.scdn.co
i.scdn.co
mobile-ap.spotify.com
mosaic.scdn.co
open.scdn.co
open.spotify.com
pixel-static.spotify.com
pl.scdn.co
seektables.scdn.co
spclient.wg.spotify.com
spotify.com
t.myvisualiq.net
vt.myvisualiq.net
www.gstatic.com
www.scdn.co
www.spotify.com

Domains used by spotify

Quite many, but this should be no surprise nowadays. Google’s gstatic is for the reCaptcha service spotify uses.

With this, my kids now can listen to their favorite music all day long, which is what I paid for, right?