Privacy Policy
Last updated October 2026
Short version: we collect the minimum needed to run your account and your collection. We don't sell your data, we don't run advertising, and there are no analytics or tracking scripts on this site.
What we collect
- Account details — your email address and a cryptographically hashed version of your password. We never store your password itself and cannot recover it.
- Your collection — the titles, distributors, UPCs, conditions, notes, purchase prices and dates you enter, plus the price history generated when you price a title.
- Usage counters — how many price lookups your account has used in the current period, so plan limits can be enforced.
- Server logs — ordinary technical records kept briefly for security and debugging.
We do not collect your location, contacts, or browsing activity on other sites. When you buy Pro, payment is handled by Stripe (see below): your card details go to Stripe and never reach our servers.
Cover photos
Images you submit are stored with your account id so we know who contributed them and can honour a removal request. Once approved they are shown to other users, but never with your name or email attached — contributions are not publicly credited.
Photos are resized and re-encoded in your browser before they are uploaded, which removes embedded camera metadata such as GPS coordinates. We never receive the original file.
Cookies
One cookie, used to keep you signed in. It's HTTP-only and expires when your session does. The iPhone app can't use that cookie, so it keeps the same sign-in as a token in the app's own storage instead. Your chosen colourway is stored on your device and never sent to us. No advertising or analytics cookies are used.
How your data is used
Only to operate the Service: to sign you in, store and display your collection, fetch prices, and enforce plan limits. We don't sell or rent personal information, and we don't use your collection to build profiles or advertising audiences.
The shared disc library. To name discs for everyone when they scan a barcode, DISCDEX keeps a shared list of disc details — title, label and format for each barcode. It's filled from sold-listing data, and when two or more accounts have entered the same details for a barcode, those details can be added too. Only the disc's details go into the library — never who owns it, your prices, notes or anything else about you.
Who else sees it
- Hosting and database — our infrastructure provider stores the data on our behalf.
- Price and barcode data providers — when you price a title, or when we look up a barcode to fill in a disc's name and format, we send only the search terms (a UPC or a title). We never send anything identifying you or your account.
- Stripe — sells Pro on our behalf (as the merchant of record, it also handles sales tax). It receives your email and payment details; we receive only whether you've paid and a customer reference. Stripe's own privacy policy applies to what it holds.
- Email provider — sends password-reset emails, and delivers our encrypted nightly backup of the database to us.
- Legal requests — we may disclose data if required by law.
Cached price results are shared between accounts, as described in the app's Info page. They contain prices and search terms only — never your identity, your collection, or which titles you own.
Retention and deletion
We keep your data while your account is open. You can delete individual titles and collections yourself at any time, and export everything to CSV whenever you like.
To close your account entirely, use Delete account on the Account page. That immediately and permanently removes your account, every collection, every title and all price history — it happens straight away and cannot be undone, so export first if you want a copy. If you have trouble, email matt@discdex.app. Anonymous cached price data may remain, as it isn't linked to you.
Two things outlive an account by design. Encrypted backups of the database are kept for up to 30 days, so a deleted account disappears from them within that time. And cover photos you contributed that were approved stay in the shared library, with your account removed from them.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. The export and delete tools in the app cover most of this — for anything else, email us. We won't discriminate against you for exercising these rights.
Children
The Service isn't directed at children under 13 and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll remove it.
Security
Passwords are hashed, sessions are signed and expire, and all traffic is encrypted in transit. No system is perfectly secure, but we don't hold card numbers and we keep personal data to a minimum.
Changes
If this policy changes materially we'll update the date above and note it here. Questions or requests: matt@discdex.app
← Back to DISCDEX