It looks like they request these permissions: user-top-read, playlist-read-private, playlist-read-collaborative and they also gets your your name, username and profile picture.
The Pudding is, per the footer on that page, "a digital publication that explains ideas debated in culture with visual essays". It's been around for a few years already. https://pudding.cool/archives/
