v1.0.7

• Privacy disclosure: names exactly what crosses the license server during Spotify sign-in (the OAuth code and your device's own local callback address) instead of the vaguer "relays Spotify OAuth" - token exchange itself still happens entirely on your device.