Privacy Policy

1. Overview

This Privacy Policy explains how Diotima, LLC ("we", "us") collects, uses, and shares information when you use Discbound. It should be read alongside our Terms of Service.

2. Information we collect

• Account and profile information: email address, name, password (stored as a hash) or OAuth identifiers, and any profile fields you choose to fill in
• Your collection data: the recordings, books, and other holdings you catalogue, along with locations, notes, wishlist entries, and similar personal organizational data
• Contributed catalogue data: factual information you submit about recordings or works themselves, which becomes part of the shared catalogue rather than your personal data (see Terms of Service, "Contributed data about recordings")
• Usage and device data: IP address, browser and device type, pages visited, and timestamps, collected automatically through server logs and any analytics tools we use
• Cookies and similar technologies: see Section 4 below

3. How we use your information

• To provide, maintain, and secure the service and your account
• To detect and prevent abuse, fraud, or violations of our Terms of Service
• To understand how the service is used and improve it, including through analytics tools such as Google Analytics
• To serve advertising, including through Google AdSense, as described below
• To send you necessary service communications (e.g., account or security notices)

4. Cookies

We and our third-party partners use cookies and similar technologies in these categories:

• Strictly necessary: session and authentication cookies required for login and core functionality. These are always active and do not require consent.
• Preference: cookies that remember settings such as color mode or currency.
• Analytics: cookies used by tools such as Google Analytics to understand aggregate usage patterns.
• Advertising: cookies used by Google AdSense and similar networks to serve and measure ads, which may also be used by those networks to personalize ads across other sites you visit.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before setting non-essential (analytics and advertising) cookies, and you can withdraw that consent at any time through the cookie settings shown when you first visit the site or through your browser settings. You can also manage or opt out of interest-based advertising generally through your browser's cookie controls, through Google's own Ads Settings, or through opt-out tools offered by the Digital Advertising Alliance, the Network Advertising Initiative, or (in the EU) the European Interactive Digital Advertising Alliance's "Your Online Choices" service.

5. Sharing your information

We do not sell or share your collection data — what you own, where it's stored, your notes, wishlist, and similar personal catalog information — with advertising or analytics providers, or with any other third party, except:

• With service providers who host or process it on our behalf under contract solely to operate the service, such as hosting and cloud storage providers
• Where required by law, to protect rights and safety, or in connection with a business transfer or, as described in our Terms of Service, a discontinuation of the service

Separately, usage and device data (such as IP address, browser type, pages visited, and cookie identifiers — but never the contents of your collection) may be shared with analytics and advertising providers, such as Google, for the purposes described in Section 4. Authentication providers (e.g., Google, GitHub, Apple, Facebook, Microsoft) receive only what's needed to sign you in when you choose to use them.

Under some US state privacy laws, sharing usage or cookie data with advertising partners for interest-based advertising is treated as a "sale" or "share" of personal information even though no money changes hands. See Section 8 below for your opt-out rights.

6. International data transfers

Your information may be processed in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland.

7. Data retention and deletion

We retain your account and collection data for as long as your account is active. If you delete your account, we delete this data, other than what we must retain for legal or security purposes. Server logs are retained for a limited period for security and troubleshooting. If the service is ever discontinued, we will handle data as described in our Terms of Service, "Service availability and discontinuation."

8. Your privacy rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to certain processing, and withdraw consent at any time
• Receive a copy of your data in a portable format
• Lodge a complaint with your local data protection supervisory authority

If you are a California or other US state resident, you have the right to:

• Know what personal information we collect about you and request a copy
• Request deletion or correction of your personal information
• Opt out of the "sale" or "sharing" of your personal information, including for interest-based advertising
• Not be discriminated against for exercising any of these rights

To exercise any of these rights, contact us at hello@discbound.net.

9. Children's privacy

Discbound requires users to be at least 16 years old and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date above. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

11. Contact

Questions about this policy or your data can be sent to hello@discbound.net.