Fucking finally.

Any chance you could me know if you do?

They only need aggregate data for that, they don’t need them to be assigned to a specific user account.

Nope. Especially under GDPR. To use an example of Spotify - having a “wrapped” is not part of the core offering and is not necessary for the service to work. Meaning they need your permission to store that data (or other legal framework).