Privacy Policy

Last updated June 2026. VinylScape is a personal project operated by Carlos Rego (NullMind), based in Portugal (EU/GDPR).

Who runs VinylScape

VinylScape is an independent, self-hosted project run by Carlos Rego (NullMind). It is not affiliated with Discogs or Last.fm. For any privacy request, contact privacy@vinylscape.net.

What we store

  • Account data you provide: email, username, display name, an encrypted password hash, and your language and profile preferences.
  • Discogs data, when you connect your account: your collection and wantlist (artist, title, year, format, label, cover image, date added) and the marketplace prices we look up for those releases. Connecting uses Discogs OAuth; the access tokens are encrypted at rest and are never shown to anyone.
  • Last.fm data, when you add your username: your public scrobble history (track, artist, album, timestamp), read through the public Last.fm API. We do not need your Last.fm password.

What we do with it

We use it only to power your own dashboard: matching scrobbles to records you own, computing plays, value, listening stats, and the wishlist price alerts you opt into. We do not sell your data, share it with advertisers, or use it for any purpose beyond running the app for you.

Third-party sources

Data comes from Discogs and Last.fm under their respective terms. Their handling of your data on their platforms is governed by their own privacy policies.

Where it lives

Data is stored in a private database on a server in the EU and backed up alongside it. Access is restricted to the operator for maintenance only.

Your rights (GDPR)

You can access, correct, export, or delete your data at any time. Deleting your account from Settings permanently removes your account and all associated collection, scrobble, play, wishlist, and notification records (the deletion cascades). Disconnecting Discogs or removing your Last.fm username stops further syncing of that source. For any request you cannot complete in-app, email the address above.

Retention

We keep your data while your account is active. When you delete your account, the data is removed promptly; residual copies in routine backups age out on the normal backup rotation.

Cookies

We use a session cookie to keep you signed in and a small cookie to remember your language. No third-party tracking or advertising cookies.

Changes

If this policy changes materially, the "last updated" date above will change. Continued use after an update means you accept the revised policy.

← Back to home