Privacy Policy

Information we collect

• Account information. Your email address, a securely hashed password (we never store your password in plain text), and the display name you choose.
• Profile picture. If you upload one, it's compressed and stored directly in our database, tied to your account.
• Social links. Any handle (e.g. Instagram) you choose to add to your profile is shown publicly on it, exactly as you entered it.
• Collection data. The records you add, their condition, storage location, personal notes, ratings, play history, and any digital links (Spotify/Apple Music) matched to them.
• Social activity. Who you follow, who follows you, likes on collections/records, and messages you send in conversations with other users.

How we use this information

We use the information above only to operate Sleeveside itself:

• Authenticating you and keeping you signed in.
• Showing your collection, stats, and play history back to you.
• Running the social features: follows, activity feeds, likes, discovery, and messaging between users who follow each other back.
• Looking up release data (cover art, genres, marketplace pricing) from Discogs, and matching your records to Spotify/Apple Music links.

We do not use your data for advertising, and we do not sell or rent it to anyone.

Cookies and local storage

Sleeveside doesn't use cookies. It stores a small amount of data directly in your browser's local storage (a first-party browser storage mechanism, similar to a cookie, that only Sleeveside's own code can read):

• Your signed-in session token.
• Your light/dark theme preference.

None of this is used for advertising, cross-site tracking, or analytics, and it's never shared with or accessible to third parties.

Sharing your information

We don't share your personal information with third parties, except with Discogs/Spotify/Apple Music APIs as strictly necessary to look up release data and digital links. Other users can see whatever your privacy settings make visible: your display name and profile picture always; your collection if it's public or you follow each other; your followers/following lists if you've left that setting on; and your activity, likes, and messages as part of using those features directly with you.

Data retention & deletion

To request deletion of your account or any data we hold about you, contact us at the email below and we'll take care of it promptly.

Security

Passwords are hashed with bcrypt and never stored in plain text. Profile pictures are compressed server-side before storage.

Children's privacy

Sleeveside is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of Sleeveside after a change means you accept the updated policy.

Contact

Questions, or want your data deleted? Email luis.barrantesv@gmail.com.