Privacy Policy

Last updated 4 July 2026

This policy explains what VinylRank collects, why, and what you can do about it. We keep it short and mean it.

What we collect

• Account details. The email address and password you register with. Passwords are stored only as a secure hash.
• Discogs data. When you connect Discogs, we sync your collection and wantlist (releases, tracks, and related metadata) so the app can search and watch them. We access this through Discogs' official API using OAuth — we never see or store your Discogs password.
• Watchlist & alerts. The releases you choose to watch and the marketplace data we check for them.
• Waitlist. If you join the Pro waitlist, we store the email address you give us so we can tell you when Pro launches.

How we use it

• To run the app: sync your library, power search, and send the watchlist alerts you asked for.
• To send account email such as password resets, and waitlist updates.
• We do not sell your data or use it for advertising.

Storage and security

Your data is stored in a managed PostgreSQL database. Your Discogs access tokens are encrypted at rest. Sessions use secure, httpOnly cookies.

Third parties

• Discogs — the source of your collection data, accessed via their API.
• Resend — sends our transactional and alert emails.
• Vercel and Neon — host the app and database.

Your choices

You can disconnect Discogs at any time from Settings, which removes the synced collection data. To delete your account entirely, or to ask what we hold about you, contact us at the address below.

Contact

Questions about privacy? Email hello@vinylrank.com.