Cookie Policy

These are needed to make the service work and cannot be switched off. Supabase session cookies keep Google-authenticated users signed in and let the server validate protected requests. Public demo preferences and the optional-cookie choice are stored locally in your browser.

Authentication is live. Supabase-managed cookies store the session and sign-in verifier needed for Google OAuth, session refresh, protected routes and logout. These cookies are sent to Hunt My Vinyl and Supabase as required to provide and secure your account.

Signed-in marketplace choices and discount thresholds are saved to your Supabase-backed account. Separate public demo preferences and your cookie consent preference are stored in local storage so the demo remembers them on that browser.

Hunt My Vinyl uses Google Analytics 4 (measurement ID G-7ECDCDLJQS) with Advanced Consent Mode. The Google tag loads with analytics storage, ad storage, ad user data and ad personalisation all denied. Before you choose, and after rejection or withdrawal, Google may receive the cookieless measurement and consent-state pings documented for denied Consent Mode. Analytics cookies are not permitted in that state. Rejecting analytics does not restrict any part of the service.

If you accept, Hunt My Vinyl updates analytics storage to granted. Ad storage, ad user data and ad personalisation remain denied. We measure only safe page templates and a small fixed public-beta funnel: registration completion, onboarding completion, albums added, recommendation interactions, Amazon marketplace click-outs, referral sharing and Pro interest, plus public album views, save-button clicks and album-related Google sign-in initiation or return. Parameters are controlled categories such as market, provider, placement and action. We do not set a Google Analytics user ID and do not send your name, email address, Hunt My Vinyl user ID, search terms, album titles, album IDs or free text.

Google may process ordinary technical request information and, depending on consent state, browser or device signals, interaction time and approximate location derived from network information. Denied pings are designed without analytics cookies but are still requests to Google. Hunt My Vinyl disables Google signals and advertising-personalisation signals. Your choice controls analytics storage; consent is the basis for enabling analytics cookies and the fuller consented measurement.

When accepted, Google Analytics can set first-party cookies beginning withhmv_ga (and Google may recognise legacy_ga cookies). Hunt My Vinyl configures its analytics cookies for a maximum of six months without extending them on every visit. Actual storage can be shorter, for example when you clear browser data or withdraw consent.

• Analytics cookies stay off unless you turn them on
• Nothing optional is preselected; denied Consent Mode can still send cookieless pings
• Accepting and rejecting are equally easy
• Rejecting analytics never blocks access to the service

Separately from GA4, Hunt My Vinyl counts pageview and fixed funnel-event hits in its own database whether or not you accept analytics cookies. This helps us understand basic public-beta operation using our legitimate interest in improving and maintaining the service. The counters measure hits, not unique people.

The ingest endpoint stores only atomic daily totals for a small route allowlist or safe template such as /album/:id, plus controlled event categories. It does not store an IP address, user agent, cookie or local-storage ID, account or user ID, raw URL, UUID, query string, album identifier or free-text payload. Normal hosting infrastructure necessarily handles a network request, but this counter does not persist or use that request metadata.

Public album views can include a coarse source category such as Google referrer, other search, internal navigation, external referral or direct / unknown. The browser classifies the initial referrer locally; its URL, hostname, path and query are not sent or stored with this category. Subsequent in-app album navigation is internal. The new checkpoints remain aggregate signals, not linked individual journeys or proof of a purchase.

After you accept analytics, Hunt My Vinyl also creates a random browser ID in local storage and sends it only to this first-party endpoint. The database stores only its SHA-256 digest in daily presence buckets so the admin dashboard can estimate consented unique browsers. It is not linked to an account, event payload or raw request and it is removed from that browser when you reject or withdraw. One person using several browsers or devices can therefore be counted more than once.

You can change your choice at any time using the cookie settings below, or via the Cookie settings link in the footer. You can also clear cookies and local storage in your browser settings. When you reject or withdraw consent, Hunt My Vinyl disables further GA4 tracking returns analytics storage to denied, keeps all advertising consent fields denied and attempts to remove accessible Google Analytics cookies for this site. Cookieless denied pings and the separate first-party aggregate hit counters continue. The optional random first-party browser ID is removed and is not used for later denied hits. Previously collected information may remain at Google until it is deleted under the GA4 property's retention settings or another applicable retention requirement.

Questions about this policy? Email hello@huntmyvinyl.com.