30/264 our business, operating results, and financial condition. The regulation of domain names in the United States and in foreign countries is subject to change. Regulatory bodies could establish additional top­level domains, appoint additional domain name registrars, or modify the requirements for holding domain names. As a result, we may not be able to acquire or maintain the domain names that utilize our brand names in the United States or other countries in which we may conduct business in the future. Litigation or proceedings before governmental authorities and administrative bodies may be necessary in the future to enforce our intellectual property rights, to protect our patent rights, trademarks, trade secrets, and domain names and to determine the validity and scope of the proprietary rights of others. Our efforts to enforce or protect our proprietary rights may be ineffective and could result in substantial costs and diversion of resources and management time, each of which could substantially harm our operating results. Additionally, changes in law may be implemented, or changes in interpretation of such laws may occur, that may affect our ability to protect and enforce our patents and other intellectual property. Our User metrics and other estimates are subject to inherent challenges in measurement, and real or perceived inaccuracies in those metrics may seriously harm and negatively affect our reputation and our business. We regularly review key metrics related to the operation of our business, including, but not limited to, our Ad­Supported MAUs, Content Hours, Content Hours Per MAU, MAUs, Premium ARPU, Premium Churn, and Premium Subscribers, to evaluate growth trends, measure our performance, and make strategic decisions. These metrics are calculated using internal company data and have not been validated by an independent third party. While these numbers are based on what we believe to be reasonable estimates of our User base for the applicable period of measurement, there are inherent challenges in measuring how our Service is used across large populations globally. For example, we believe that there are individuals who have multiple Spotify accounts, which can result in an overstatement of Ad­Supported MAUs and MAUs. Errors or inaccuracies in our metrics or data could result in incorrect business decisions and inefficiencies. For instance, if a significant understatement or overstatement of Ad­Supported MAUs and MAUs were to occur, we may expend resources to implement unnecessary business measures or fail to take required actions to attract a sufficient number of Users to satisfy our growth strategies. In addition, advertisers generally rely on third­party measurement services to calculate our metrics, and these third­party measurement services may not reflect our true audience. Some of our demographic data also may be incomplete or inaccurate because Users self­report their names and dates of birth. Consequently, the personal data we have may differ from our Users’ actual names and ages. If advertisers, partners, or investors do not perceive our User, geographic, or other demographic metrics to be accurate representations of our User base, or if we discover material inaccuracies in our User, geographic, or other demographic metrics, our reputation may be seriously harmed. See “—We rely on advertising revenue from our Ad­Supported Service, and any failure to convince advertisers of the benefits of our Ad­Supported Service in the future could harm our business, operating results, and financial condition,” “—We are at risk of artificial manipulation of stream counts and failure to effectively manage and remediate such fraudulent streams could have an adverse impact on our business, operating results, and financial condition. Fraudulent streams and potentially associated fraudulent User accounts or artists may cause us to overstate key performance indicators, which once discovered, corrected, and disclosed, could undermine investor confidence in the integrity of our key performance indicators and could cause our stock price to drop significantly,” and “—We are at risk of attempts at unauthorized access to our Service and failure to effectively prevent and remediate such attempts could have an adverse impact on our business, operating results, and financial condition. Unauthorized access to our Service may cause us to misstate key performance indicators, which once discovered, corrected, and disclosed, could undermine investor confidence in the integrity of our metrics and could cause our stock price to drop significantly.” 23

Spotify F1 | Interactive Prospectus - Page 30 Spotify F1 | Interactive Prospectus Page 29 Page 31