Privacy Policy

Vinyl Shelf is a small, personally-operated service for cataloging vinyl records. We collect only what the features need, we don't sell or share your data with advertisers, and there is no analytics or tracking beyond an authentication cookie. The service is provided as-is — use it at your own risk.

Google account basics. Signing in with Google gives us your name, email address, and profile photo. We use them to identify your account, show your profile, and email you about membership decisions. We never see your Google password, and we request no other Google data or permissions.

Your collection. Records, grades, prices paid, value estimates, storage locations, personal notes, play history, wishlists, crates, and loan records (including borrower names you enter) are stored so the app can work.

Friend invitations. If you invite a friend, we store the Gmail address you enter so the request can be linked to their account if and when they join. Don't enter someone's address without their ok.

Your collection is private to you by default. It becomes visible to others in exactly three ways: share links you create (anyone holding the link can view that shelf, crate, or wishlist until you revoke it), accepted friends (read-only view of your shelf and wishlist), and the administrator, who can see account details (name, email, membership status) in order to run the approval process and operate the service.

Google handles sign-in. Discogs provides catalog data, cover art, and price information; our server queries their API, and cover images load into your browser from Discogs' servers. Apple's iTunes API provides 30-second track previews; preview audio loads into your browser from Apple's servers, which means Apple sees your IP address when you play one — as with any image or audio file loaded from the web. We send none of your personal data to any of these services; lookups contain only album/track names or barcodes.

One cookie: an encrypted session token so you stay signed in. No advertising cookies, no third-party analytics, no fingerprinting.

Data is stored on privately operated server infrastructure with routine encrypted backups. This is a hobby-scale service, not a commercial platform with a support team and an SLA. Despite reasonable care, data loss, downtime, or security incidents are possible — keep your own records of anything irreplaceable, and use the service at your own risk.

You can revoke share links, decline or remove friends, and delete individual records at any time. To delete your account and all associated data, email schreck@gmail.com from your account address and it will be removed.

If this policy changes materially, the date above will change and significant changes will be noted on this page.