Privacy
What we store
| Data | Why it exists |
|---|---|
| Account: username, display name, email, password (stored as a hash, never the password itself), optional bio, avatar colour, profile privacy setting | to sign you in and render your profile |
| Activity: listens and ratings, reviews, lists and their items, list comments, likes, follows, watchlist entries, personal tags | to show your own history, and to show it to other members when your profile is public |
| Sign-in sessions: a server-side session record (issued, expiry, revocation) plus a token and a small cached profile in your browser's localStorage | to keep you signed in for up to 30 days and to draw your own header without a round trip |
| Corrections you submit, with their status history; anonymous submissions also receive a one-time tracking token, stored only as a hash | to answer the submission and keep the catalogue's edit history auditable. This site does not currently provide anonymous submitters a status link. |
| Short-lived counters for repeated sign-in attempts | to slow down password guessing |
What we do not do
- No advertising, no third-party analytics, no cross-site trackers, no data sold or shared for marketing.
- No email is sent by this site: there is no newsletter, no notification email and no password-reset email. Corrections and account state are tracked in the app instead — which also means a forgotten password is handled through the contact route, not by a reset link.
- No audio, and no behavioural profile built from your listening for anyone else's use.
Who else necessarily sees something
- Cloudflare hosts the site and the database, so it processes every request and stores the rows above as our infrastructure provider.
- Publisher and retailer servers see your IP address when a cover image loads from their CDN, and again when you click through to listen or buy. From that point their own privacy policies apply.
Your controls
- Profile privacy — public or private — and your profile text live in Settings.
- Delete account (Settings, confirmed with your password) runs as one transaction that removes your account row and your activity — listens and ratings, reviews and the likes on them, lists and their items, list comments, likes, follows, watchlist, personal tags — and revokes every session, including sessions already open elsewhere.
- Your correction submissions are deliberately kept as catalogue edit history, because they document what changed in the catalogue and why; the internal submitter id recorded with them stays, and is visible to moderators, never published with your name. If a submission contains something you want removed, say so through the contact route.
Children
This is a general-audience catalogue with no age gate. We do not knowingly hold accounts for children under 13; if you believe a child has one, tell us via the contact route and it will be removed.
Changes to this page
The date at the top changes when this text changes. The rule this project works to: no new data store or new third-party script may ship without updating this page in the same change.