Privacy

Read-only

Read-only access: recordreel only reads from Discogs. It never changes your Collection or anything else on your Discogs account.

What we store

• Your Discogs id, username and the date you joined Discogs.
• The Discogs access token that lets us read your Collection. It is encrypted at rest, with a key kept outside the database.
• Your Collection as last fetched: title, year, artists, labels, formats, genres, styles, cover image link and date added for each record.
• Your Collection value, as Discogs estimates it.
• Your sign-ins. We keep only a hash of each session id.

What is public

Nothing, until you choose. A Reel is public only once you Share it, and you can stop sharing it at any time. The Leaderboards and showing your Collection value are off until you turn them on.

When we delete you

• When you press Delete my data.
• When you revoke recordreel on Discogs. We delete you once Discogs has refused our access twice, at least an hour apart.
• After 12 months without a sign-in, unless you are on the Leaderboards.

Deletion is immediate and complete. There is no warning and no grace period. We also clear your public Reels and Share cards from Cloudflare's cache.

Backups and logs

The database is backed up continuously to Cloudflare R2 in the EU. Backups are kept for 7 days, so deleted data leaves them within 7 days. Server logs are kept for 7 days and never contain tokens, cookies, session ids or IP addresses.

Cookies and trackers

No trackers, no ads, no analytics scripts, so no cookie banner. We set one cookie while you sign in, kept for 10 minutes, and one session cookie once you are signed in. We count daily totals, such as sign-ins and Shares, without knowing who did them.

Who else sees your data

Discogs, which we read from. Cloudflare, which serves the site, caches public pages and stores the backups.

Questions

Write to [email protected].