Privacy Policy

THE MAGNOLIA CONNECTION is the data controller for personal data processed through Hunt My Vinyl. You can reach us at hello@huntmyvinyl.com.

Service name

Hunt My Vinyl

Legal name

THE MAGNOLIA CONNECTION

Legal form

Commanditaire vennootschap

Country

Belgium

Enterprise number

0844.768.545

VAT number

BE 0844.768.545

Registered office

Paswerkerij 12, 3010 Leuven, Belgium

Contact

hello@huntmyvinyl.com

When you use a live account feature, we process only the data needed to provide it:

• Account name and email address
• Google and Supabase authentication identifiers and session information
• Albums you enter manually in your wantlist
• Albums and bounded edition provenance you import from a Discogs Wantlist CSV
• The Amazon marketplaces and deal threshold you save
• Profile defaults such as locale, timezone and billing country
• Your personal referral code, successful new-account referral relationship and reserved reward status
• Which Tell a friend button you use, without the recipient, message content or destination account
• If you accept analytics cookies: a pseudonymous GA browser identifier, safe page template and fixed product-interaction categories
• First-party daily totals of pageview and fixed user-journey-event hits, without visitor or account identifiers
• Fixed public-album conversion categories: signed-in or anonymous view, save-button click, Google sign-in initiation or return, and a coarse source category such as Google referrer or direct / unknown
• After analytics consent: a random first-party browser ID, stored in the database only as a SHA-256 digest for consented-browser counts
• Support communications you send us
• Necessary technical, security and consent records
• The most recent time you requested a page while signed in, without storing the page URL in this activity record
• Whether watchlist emails are enabled for your account, when that preference changed and the delivery or suppression status needed to honour it
• For authorised administrators: the account identity, selected marketplaces, watchlist, owned-album list and most recent signed-in activity needed to support users and operate the beta

Public album and retailer-price records are not observations about your purchasing activity. Discogs Wantlist CSV import, catalog matching and verified price display are available. Manually curated beta watchlist emails are enabled by default for beta accounts and can be disabled in the dashboard or through the unsubscribe link. Generic CSV import, live Discogs synchronisation, automated price alerts and payments are not active. Google Analytics loads with storage denied and may send Google's documented cookieless Consent Mode pings before acceptance or after rejection. Authenticated users can save exact Amazon product links. Aggregate product metrics remain separate from a restricted account-support view. Only authorised Hunt My Vinyl administrators can use that view to inspect an account's name, email, selected stores, watchlist and owned-album list; it does not expose raw import rows or provider payloads. The support view shows only the latest signed-in activity timestamp, not a page history.

• Providing the service and your account — performance of our agreement with you
• Security, fraud prevention and improving the service — our legitimate interests
• Operating the referral programme and reserving a future reward — performance of the referral offer you choose to use
• Using analytics cookies for fuller GA4 public-beta measurement — your consent, which you can withdraw at any time
• Sending limited cookieless GA4 denied-state pings — our legitimate interest in privacy-restricted service measurement
• Counting privacy-minimised first-party pageview and user journey event hits — our legitimate interest in understanding and improving basic service operation
• Estimating consented unique browsers with a random first-party browser ID — your analytics consent
• Legal and accounting obligations — compliance with a legal obligation
• Responding to support, deletion and export requests — performance of our agreement and compliance with legal obligations
• Sending beta watchlist emails — our legitimate interest in helping you use the watchlist service; you can object and stop them in your dashboard or through the unsubscribe link

Google is the active sign-in provider. Separately, the GA4 tag uses Advanced Consent Mode: when analytics storage is denied, Google can receive cookieless measurement and consent pings; after acceptance it can also use analytics cookies. Advertising storage, ad user data and ad personalisation remain denied. Supabase provides authentication, database and account infrastructure, including the first-party aggregate counters. These providers process information needed for their services under their applicable terms and data-protection arrangements.

Hunt My Vinyl does not set a Google Analytics user ID and does not send account names, email addresses, Hunt My Vinyl user IDs, search terms, album titles, album IDs or free-text event values to GA4. Google may still receive ordinary technical request information, browser or device signals, time of interaction and network information used to derive an approximate location. Google signals and advertising-personalisation signals are disabled in the tag.

Hunt My Vinyl is registered with Amazon.de PartnerNet. Saved product links open Amazon directly and may include a verified local affiliate tag. Opening a link sends the normal browser request information to Amazon; the URL does not include your Hunt My Vinyl user ID, account email or watchlist data. A shown observation can still become stale before you reach Amazon, so the retailer page remains authoritative.

Keepa supplies product matching and price information for supported Amazon marketplaces. Provider requests contain album search terms or an ASIN, not your Hunt My Vinyl account identity, email address or personal watchlist ownership.

Postmark provides delivery and unsubscribe handling for optional watchlist emails. It receives the recipient address, message content and technical delivery metadata. A Postmark unsubscribe or suppression disables further watchlist emails in Hunt My Vinyl; re-enabling them requires a new explicit choice in your dashboard.

The following provider categories are not connected today:

• Discogs synchronisation
• Payment provider

We collect only what a feature genuinely needs. We keep personal data only as long as needed for the purpose it was collected for, for our legal obligations, and for legitimate security requirements. More specific retention periods will be documented as additional features are activated rather than invented here.

Hunt My Vinyl's first-party product counter keeps atomic daily hit totals, not individual hit records or unique-person profiles. Routes are reduced to a small allowlist or template and event dimensions to fixed enums before ingest. It stores no IP address, user agent, account ID, raw URL, query string or free text. When analytics is accepted, separate daily presence buckets store only a SHA-256 digest of a random browser UUID. The raw browser ID remains in local storage, is not linked to event dimensions or an account and is removed on rejection or withdrawal. Counts represent consented browsers, not necessarily people.

For a public album landing, the browser reduces its initial referrer to a fixed category: Google, another recognised search engine, internal navigation, another external source, or direct / unknown. The referrer URL, hostname, path and query are not sent with this category or stored by the first-party counter. Later in-app album navigation is counted as internal. These totals do not link a person's page view, sign-in, saved record or Amazon click, and they do not establish a purchase or an organic-search attribution.

Hunt My Vinyl configures its GA4 first-party analytics cookies for no more than six months without refreshing that lifetime on each visit. Google Analytics event retention is controlled separately in the GA4 property. Withdrawing consent stops future Hunt My Vinyl analytics storage back to denied and triggers a practical attempt to remove accessible analytics cookies. Cookieless Consent Mode pings and the separate first-party aggregate counts continue; withdrawal does not retroactively erase processing already carried out.

Self-service deletion and export controls are not available yet. To request deletion or an export of your account data, email hello@huntmyvinyl.com. Deletion removes your profile, marketplace preferences and wantlist, apart from records we must retain for legal, accounting or security reasons.

• Access a copy of your personal data
• Correct data that is inaccurate
• Delete your data
• Restrict processing
• Receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing already carried out

You can also lodge a complaint with the Belgian Data Protection Authority (Gegevens­bescher­mings­autoriteit / Autorité de protection des données).

Google and Supabase may process data outside the European Economic Area. Where required, their processing relies on recognised transfer mechanisms and safeguards such as adequacy decisions or the European Commission's standard contractual clauses.

Hunt My Vinyl does not sell personal information.

Questions about this policy? Email hello@huntmyvinyl.com.