Last updated: October 2, 2026
Vinyl Portfolio is run by Max Rosenthal in Los Angeles, California. He is the data controller for the app, the website and related services. Contact: admin@vinylportfolio.com.
| Data | When | Why |
|---|---|---|
| Email, name and user ID from email, Apple or Google sign-in | You create an account | Run your account and sync |
| Your collection: records, wishlist, notes, conditions, prices you paid, purchase places, values, photos you attach, settings | You add them (on your device as a guest, on our servers with an account) | The core app |
| Profile: username, display name, bio, location text, avatar | You fill them in | Your profile and friends features |
| Scan photos | You scan | Identify the record. The photos of a record you add are kept with it (on your device as a guest, privately in your account when signed in) so you can see them again, and are deleted when you delete the record or your account. Other scan photos are discarded after the request |
| Posts, comments, votes and reports on the Feedback board | You post | The community board |
| Anonymized sold prices | Only if you turn on "Contribute to community pricing" | Better values for everyone; your identity and location are never included |
| App usage: screens viewed, taps, features used, search terms and the prices you enter, errors, performance, device and app version, approximate location from IP, language | You use the app | Fix bugs and improve the product |
| Session recordings of the app screen, with every typed input masked | You use the app | See where people get stuck |
| Purchases and subscription status | You buy Pro | Unlock Pro, support and refunds |
| Ad and campaign source: Apple's ad-attribution token and the link you arrived from (for example UTM tags) | You install from an ad or our links | Measure which campaigns work |
| Push token | You allow notifications | Send the alerts you chose |
| Messages to support | You email us | Answer you |
We do not collect precise GPS location, contacts, or payment card numbers (the app stores handle payment).
Scan photos and some text are sent to Anthropic's Claude API to identify records and to screen uploaded avatars for inappropriate content. Under Anthropic's commercial terms, this data is not used to train their models. Values and identifications are produced by automated systems and may be wrong; nothing about you is decided automatically in a way that has legal or similar effects.
We use PostHog to understand how the app is used. In the apps PostHog creates a profile for each device, including guests; on the website it creates one only when you sign in. It links the profile to your account when you sign in so we can follow issues across devices. Session recordings capture what the app screen shows; typed text (email, passwords, searches, prices) is always masked and certain personal fields are hidden. We don't use analytics for advertising and don't let PostHog sell it. On the website, analytics and session recordings start only after you accept them in the cookie banner. In the iOS and Android apps they are on unless you turn them off. Either way you can change this anytime in Settings › Privacy › Share usage analytics.
Necessary storage: your sign-in session, your collection and settings saved in your browser or app, and your analytics choice. Analytics storage: PostHog keeps a cookie (ph_*_posthog) and local storage to recognise your device; on the website it is set only after you accept analytics, and it is cleared when you decline or turn analytics off. Session storage: the campaign link you arrived from, for the current visit only. Fonts are loaded from Google Fonts, which receives your IP address.
We share only what each provider needs to run the app, under contracts that limit their use. We don't sell your personal information and don't share it for cross-context behavioral advertising.
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Accounts, database, file storage (US) | Account and collection data |
| Netlify | Website hosting and server functions | Requests, scan photos in transit, logs |
| Anthropic | AI identification and image moderation | Scan photos, avatars, record text |
| PostHog | Product analytics and session recordings | Usage data, device data |
| RevenueCat | Manages purchases and subscriptions | Purchase history, user ID, ad-attribution token |
| Apple and Google | Sign-in, app store payments, push notifications | Sign-in ID, purchase receipts, push tokens |
| Google Firebase | Android push notifications | Push token |
| Discogs, eBay, MusicBrainz, Cover Art Archive | Record data and market prices | Record identifiers only; your Discogs account if you connect it |
| Mapbox | Maps of purchase places | The place text you entered |
| Google Fonts (app and website) | Fonts | Your IP address when fonts load |
We may also disclose data if the law requires it, to protect people's safety or our rights, or to a successor if the app is sold or moved to a company.
Affiliate links. Some eBay links in the app are affiliate links through the eBay Partner Network. When you tap one, eBay learns the click came from Vinyl Portfolio, along with an internal record reference (never your name or email), and may pay us a small commission if you buy. It costs you nothing extra.
Your collection, wishlist and profile are visible to others only as your visibility settings allow (Anyone, Friends or Only me). Feedback board posts and comments are visible to other users with your username. Community pressing photos and anonymized price contributions can be seen by others without your name.
Account data stays while your account exists. When you delete your account, we delete your data from live systems within 30 days; backups roll off within 90 days. Analytics and session recordings are kept for up to 12 months. Anonymized price contributions and aggregate statistics may be kept because they no longer identify you.
Our providers store data in the United States. If you use the app from elsewhere, your data is transferred there, protected by the providers' contractual safeguards.
Connections use HTTPS, passwords are hashed, and access to production systems is limited. No system is perfectly secure; if a breach affects you we'll notify you as the law requires.
The app isn't for children under 13 and we don't knowingly collect their data. If you think a child under 13 gave us data, email us and we'll delete it.
We'll update the date above and tell you in the app or by email about material changes before they take effect.
Max Rosenthal, Vinyl Portfolio, admin@vinylportfolio.com