Privacy policy

This policy explains how this ViniVault installation handles personal data for people who sign in. ViniVault is a private vinyl collection PWA. It is not intended to collect data from the general public, and it does not operate an in-app shop or take payments.

Depending on how you use the app, we may store:

• Account details: name, email address, password hash, and role (owner or collector)
• Session cookies so you stay signed in
• Your collection: owned records, personal notes, ratings, purchase fields, covers you upload, and related catalogue identifiers
• Wishlist, listening history, stylus hours, and loan log entries
• Account settings and preferences (for example collection view defaults, appearance, notification toggles, optional home postcode or town for store and fair search, and whether you have completed the first-run tour)
• Vinyl Hunter hunts, finds, and related notices when that feature is enabled
• Problem reports you send (topic, message, optional page hint, and your signed-in account)
• Technical logs needed to run and secure the server (for example request errors)

Record store and fair tools look up places near a postcode or town you enter. ViniVault does not keep a separate “saved shops” catalogue of your own; an optional home location in Settings only prefills those searches.

We use this information only to:

• Authenticate you and keep vaults separate
• Show and manage your collection and related tools
• Fetch catalogue, artwork, map, or marketplace information you ask for
• Send optional Vinyl Hunter notices if that feature is enabled
• Respond to problem reports when you use Report a problem
• Maintain and protect the installation

We do not sell your personal data or use it for third-party advertising.

Data for this instance is stored on the host that runs ViniVault (application server and MySQL database). Cover images you upload or cache are stored with the app. Some cover lookups, catalogue refreshes, map searches, marketplace checks, listen-on link resolution, and — if enabled — Ask My Collection requests contact external services; see Third-party services.

Your vault is not published to other collectors on this installation. The vault owner can manage people accounts. We do not share your collection with advertisers.

If you import from an external collection service (username, CSV file, or — for a private collection — a personal access token entered for that import), those details are used only to run the import into this vault. Personal access tokens are not saved as a permanent credential in Settings.

If you use Vinyl Hunter, Ask My Collection, store or fair search, or other tools that call external services, limited details needed for that request may be sent to those providers to return results for you.

We keep your account and vault data while your account is active. If an account is disabled or removed by the owner, associated sessions end. You can export collection and wishlist data from Account where that tool is available. Ask the vault owner if you need your account deleted from this installation.

You can update your display name and password in Account settings, adjust preferences there, sign out to end a session, and remove records or personal notes you no longer want stored. You can also clear site data for this origin in your browser or device settings.

For privacy questions about this private ViniVault instance, contact the person who invited you or who operates the vault (the owner account). You can also use Account → Report a problem for genuine faults on this installation.