Privacy Policy

Your privacy is important to us. This privacy policy explains how Vinylexport ("the Service") handles your data.

1. How the Service Works

Vinylexport connects to your Discogs account via the Discogs OAuth 1.0a protocol. This allows the Service to access your collection data on Discogs.com to facilitate the export of your collection to CSV and Excel formats. The Service operates by reading your collection data through the official Discogs API.

2. Data Accessed

When you authorize Vinylexport, the Service accesses the following data from your Discogs account:

• Collection Details: Information about the releases in your collection, including artist, title, year, format, and label, as provided by the Discogs API.
• User Identity: Your Discogs username to identify your collection.

3. Data Usage

We use the accessed data exclusively to provide the core functionality of the Service:

• To retrieve your Discogs collection and present it for export in CSV and Excel formats.

Vinylexport does not modify, delete, or add any data to your Discogs account or collection.

4. Third-Party Services

Vinylexport interacts with the following third-party service:

• Discogs API: Used to authenticate users via OAuth and fetch their collection data. All interactions are governed by the Discogs API Terms of Use and Privacy Policy.

5. Data Storage & Protection

When you log in via Discogs OAuth, your Discogs access token and access token secret are stored in a secure, HTTP-only cookie in your browser. These tokens are used to authenticate your requests to the Discogs API through our backend service.

We do not store your Discogs collection data on our servers. All collection data processing happens in real-time when you request an export. The data passes through our backend momentarily to generate the CSV and Excel files but is not retained after the request is complete.

6. Data Sharing

We do not sell, trade, or share your data (including your Discogs collection data or access tokens) with any third parties for marketing or any purpose other than providing the core functionality of the Service as described above.

7. Data Retention & Deletion

Your Discogs access tokens, stored in a cookie, have a limited lifespan (e.g., 30 days) after which you will need to re-authenticate. You can revoke Vinylexport's access to your Discogs account at any time through your Discogs account settings. Since we do not store your collection data, there is no personal collection data to retain or delete on our end.

8. Contact Us

If you have questions about this policy or wish to discuss data-related concerns, please contact us at: support@nohall.dev