Privacy Policy

Last updated: 27 September 2026

This notice describes how Vinyl Snatch collects and uses the personal data of people visiting vinylsnatch.com, in line with Regulation (EU) 2016/679 (GDPR).

Data controller

Simone Lonati
Email: [email protected]

What data we collect

  • Google sign-in: name, email address and profile picture, provided by Google when you sign in. We use this data only to identify you and link your wishlist to you.
  • Wishlist: the items you save (title, price, store, link) linked to your Google account.
  • Technical and preference cookies: see the Cookie Policy for the full list.
  • Outbound click logs: when you click a link to a store, we record the store, URL, artist/album and date/time — we don't link this data to your identity.
  • Server logs: IP address and browser user agent, collected automatically for security and diagnostic purposes, kept for a limited period.

Why we use it

To provide the service you request (sign-in, wishlist, suggestions), for site security, and to understand in aggregate how Vinyl Snatch is used so we can improve it. We don't sell your data to third parties and don't use it for targeted advertising.

Who we share it with

Google receives standard OAuth authentication requests when you choose to sign in with your account — we don't share any other data you have on Vinyl Snatch with them. The infrastructure hosting the site (servers and related cloud providers) accesses data only to technically deliver the service. Public information about albums, covers and tracklists comes from services like iTunes, Deezer, MusicBrainz and Discogs — we don't send them any data that identifies you.

Data transfers outside the EU

Google is based in the United States and may process data outside the European Economic Area, based on the standard contractual clauses approved by the European Commission or equivalent mechanisms under its compliance programme.

How long we keep data

  • Wishlist and account data: until you delete your account or saved items.
  • Login session: 30 days, after which you'll need to sign in again.
  • Outbound click logs: a limited period, kept only in aggregate form beyond that.
  • Server logs: a limited period, for security purposes only.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a portable format, or object to its processing, by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Minors

Vinyl Snatch is not intended for children under 16, and we do not knowingly collect data from anyone under that age.

Changes to this notice

We may update this page over time; the date at the top shows the last update. If we make significant changes, we'll let you know with a notice on the site.