Privacy Policy
The short version
Vinyl Roulette does not collect, sell, or share your personal data. Your Discogs OAuth tokens are stored on your iPhone in the iOS Keychain. We do not run analytics, we do not use third-party trackers, and we do not profile your music taste.
What we access
Your Discogs collection
When you sign in with Discogs, the app uses Discogs' official OAuth flow to fetch your collection (release titles, artists, formats, and cover artwork URLs). This data is held in memory on your device while you use the app and is not transmitted to any server we control.
Your Discogs username
We display your Discogs username in the app interface. It is stored on-device only.
OAuth tokens
After you authorize the app, Discogs issues OAuth access tokens to your device. We store these tokens in the iOS Keychain (the same secure storage Apple uses for passwords). They never leave your device except to make signed requests directly to the Discogs API.
What we do not collect
- We do not collect your email address.
- We do not collect your Discogs password — OAuth means Discogs handles authentication directly.
- We do not collect analytics or usage telemetry.
- We do not collect device identifiers, advertising IDs, or location data.
- We do not use third-party SDKs that track you (no Facebook SDK, no Google Analytics, no crash reporters that ship PII).
Servers and third parties
The app connects to two services on your behalf:
- Discogs API (api.discogs.com) — for collection data and album metadata. See Discogs' privacy policy.
- Our OAuth proxy (vinyl-roulette.vercel.app) — a small serverless function that performs the OAuth request-token / access-token exchange. It exists only because Discogs' OAuth endpoints do not support CORS. The proxy receives the OAuth signature for those two API calls; it does not see your Discogs password and does not log or retain user data.
Your choices
You can sign out at any time from the home screen, which removes all stored OAuth tokens from your device. You can also revoke the app's access from your Discogs Applications page.
Uninstalling the app removes all locally stored data.
Children
Vinyl Roulette is not directed at children under 13 and does not knowingly collect information from them.
Changes to this policy
If we materially change how the app handles your data, we'll update this page and bump the "Last updated" date. Continued use of the app after a change indicates acceptance of the revised policy.
Contact
Questions about this policy? Email carlossalame96@gmail.com.