Privacy policy

Last updated 2026-10-04

Who is responsible

recordhood is run by Rastislav Nemec, IČO 21034061, Vidoulská 759/1, 158 00 Praha, Česká republika. Questions and requests about your data: [email protected].

What we process and why

• Browsing without an account. We don't create a profile of you. When you click through to a shop we count the click (which listing, your country as reported by Cloudflare, the referring page and your browser type) to see which shops and records are used; we don't store your IP address with it. We count clicks on ticket links on the concert pages the same way. Visitor statistics (Umami, run on our own server) only run if you allow them in the cookie settings; they use no cookies, store nothing in your browser and don't identify you. With the same consent, errors that happen in your browser are reported to GlitchTip, also run on our own server: what broke and on which page, without your IP address. Errors on our server are reported there too; they contain the page's address but nothing about you. Reports are kept for 90 days.
• Server logs. Like any website, our server logs each request (your IP address, the page, the time and your browser type) to keep the site secure and fix faults. The logs delete themselves after a few days at the latest and aren't used for anything else.
• Account. Sign-in is provided by Clerk. We keep your email address, name, the language you use the site in and your email settings, to run your wishlists and collection.
• Wishlists, collection and alerts. The albums on your wishlists and in your collection, the artists you follow, your notes and stars, and the last price we told you about. If price alerts are on, we email you at most once a day through Brevo; you can turn this off in Settings.
• Sharing your wishlist. Only if you turn it on: anyone with the link sees the albums on the lists you ticked, your wishlist notes and your first name, not your email. Turning sharing off stops the link at once.
• Weekly email. Only if you turn it on in Settings: once a week, through Brevo, to your account email. Every email has a link to unsubscribe. You can also subscribe without an account: then we keep only your email address and language, and send the weekly email once you confirm the link we email you. If you don't confirm it within a month, we delete the address.
• Discogs. Only if you connect it: your Discogs username and an access token to read your wantlist and collection, which we add to your wishlist and collection. Disconnecting deletes both and the imported items.
• Spotify. Only if you connect it: your Spotify user ID and display name and access tokens to read the artists you follow and listen to most, which we follow for you. Disconnecting deletes the tokens and those follows.
• Reports of wrong matches. What you entered, plus a one-way hash of your IP address to limit duplicate reports.
• Contact form. Your name (optional), email address and message, only to answer you. The message reaches us by email through Brevo and is kept as long as the conversation needs it.

Legal bases (GDPR Art. 6(1)): providing the service you asked for (b) for the account, wishlists, collection, sharing, alerts and the Discogs and Spotify connections; our legitimate interest (f) in security, abuse prevention and understanding which shops are used; your consent (a) for the weekly email and where the cookie banner asks for it.

You don't have to give us any personal data to use the site. An account needs an email address, because we can't create one without it; everything else (your name, connected accounts, the emails) is up to you.

Cookies and local storage

Necessary: sign-in session (Clerk), your country and language choice and how you sort your wishlist and collection (up to one year), a short-lived cookie while you connect Discogs or Spotify, Cloudflare's security cookies and the cookie that stores your choice in the cookie settings (cc_cookie, six months). Your last few searches and the albums you viewed recently are kept in your browser's local storage only, to show them in the search box and on the homepage. When you go to a shop, the shop or its affiliate network (for example CJ, Dognet or eHUB) may set its own cookies under its own policy.

Who helps us

Clerk (sign-in, USA), Brevo (emails, France), Cloudflare (network and security, USA), OpenFreeMap (Hyperknot Software Kft.; the map on the record stores page, Hungary), the provider of the server the site runs on, and Discogs (USA) and Spotify (Sweden) if you connect them. Transfers to the USA rely on the EU–U.S. Data Privacy Framework or standard contractual clauses. We don't sell your data.

How long we keep it

Account data until you delete your account (Profile → delete account); it's then removed from our database automatically, including your wishlists, collection and connected accounts. Click statistics and match reports contain no account data and are kept for statistics.

Your rights

You can ask for access to your data, its correction, deletion or a copy, restrict or object to processing, and withdraw consent at any time. Write to [email protected]. You can also complain to a data protection authority, e.g. the Czech Úřad pro ochranu osobních údajů (uoou.gov.cz), the Slovak Úrad na ochranu osobných údajov (dataprotection.gov.sk), the data protection authority of your German federal state or the Polish UODO (uodo.gov.pl).