Discollector is an app for managing your Discogs collection. This page explains what data it uses and why.
Without a profile
You can use the app without creating a profile. In this case, the app communicates mainly with Discogs (using your Discogs login), and we do not store any of your data on our server. The server only receives the requests needed to check whether you have a profile, retrieve rankings and look up known record prices. Your Discogs token is verified with Discogs on each request and is not stored on our server. The access token stays in your phone's secure keychain.
With a profile (only with your consent)
If you create a profile, we store the following on our server (Supabase, Frankfurt data center, EU):
- the username, name, email, photo and counts from your Discogs profile, along with what you enter yourself (bio, country, genres);
- a private copy of your Discogs collection;
- the prices you paid for your records, kept private;
- the wantlist records you star and the prices you set for alerts, kept private;
- if you enable notifications, your phone's push notification token (notifications are sent through Expo's push service);
- the crates you prepare for gigs, kept private;
- your photo scan balance and transactions (including purchased scans), kept private;
- the BPM and keys you save for tracks: these are shared with other Discollector users without your name;
- your scans and searches, used in aggregate to rank the most scanned and searched records.
We do not sell your data, use it for advertising or track you across apps or websites.
Photo recognition
Photo recognition requires a profile and works in two ways:
- using scan credits (10 free scans, then packs purchased in the app): the photo passes through our server, which sends it to OpenRouter using our key. OpenRouter passes it to an Anthropic Claude model in the United States. The photo is not stored: it is only used to return the record's details. We only store the balance transaction (one scan used or refunded);
- using your own OpenRouter key, stored only on your phone: the photo goes directly to OpenRouter and does not pass through our servers.
OpenRouter's privacy policy also applies in both cases.
In-app purchases
Scan packs are purchased through Apple's (or Google's) in-app purchase system. The store handles payment: we do not see your payment details. We use RevenueCat to verify purchases; it receives your Discogs username and store transactions.
Record videos
On a record's detail page, you can open videos that Discogs users have linked to that record. A video only opens in the official YouTube player (privacy-enhanced mode, youtube-nocookie.com) when you tap it. From that point on, Google/YouTube's privacy policy applies.
Bandcamp
If you connect Bandcamp from Profile, the Subsonic username and password you generate on Bandcamp stay only on your phone (in the system's secure storage) and are sent only to Bandcamp to retrieve the records you bought (title, artist, artwork and tracks) and to let you listen to the tracks you bought: the audio comes from Bandcamp straight to your phone. They do not pass through our server. If you add a Bandcamp record to a crate, we store its title, artist and artwork, just as we do for other records in the crate. From that point on, Bandcamp's privacy policy also applies. You can disconnect Bandcamp from Profile and revoke the credentials in your Bandcamp settings.
Camera
The camera is only used to read barcodes and take photos of records.
Deletion
In Profile, under "Profile details", the "Delete profile and data" button deletes your profile and all associated data from our server (collection, prices paid, wantlist, notifications, crates, scans and searches, and your photo scan balance: unused scans are lost). Shared BPM and keys remain, without your name. Signing out removes the Discogs token from your phone.
Contact
For questions: info@discollector.com.