Privacy

Last updated 5 September 2026

What this site knows about you, why, and what happens to it. Short, because there is not much of it: there is no advertising, nothing is sold or shared for marketing, and the only measurement is a count of page views that does not identify anybody.

What is collected

When you make an account

• Your email address. It is the account, so it cannot be avoided.
• A password, kept only as a scrypt hash with a random salt. The password itself is never stored and cannot be recovered from what is.
• If you sign in with Google instead, Google tells this site your email address, your name and your profile picture. Nothing else.

What you type in

• Your handle, display name, biography and profile picture.
• Your ratings: the score for every track, the criteria you weighed, your best and worst picks, any note you attached, and which records you published.
• Your comments and votes on other people's ratings, and who you follow.
• Anything you upload: artist cut-outs, custom covers, slide backgrounds.

What is worked out rather than asked for

• How many records you turned into slides today, so the daily limit can be counted.
• Which achievements you have earned. These are counted from your ratings when a page asks; nothing extra is recorded about you to produce them.

When you visit a page

• A count of the page view, through Vercel Web Analytics, which is run by the company that hosts this site. It records which page was opened, roughly where the request came from and what kind of device asked, and it counts a visit without setting a cookie, without storing an identifier in your browser and without any way to recognise you on another site or on a later day. The numbers are aggregate: they say a page was opened two hundred times, never who opened it. Vercel’s own privacy notice covers what they do with it.

What is not collected

• No session recorder, no heat maps, no scroll tracking, nothing that watches what you do on a page.
• No advertising identifiers, and no cookies that follow you to another site.
• No location beyond whatever a server log holds about an IP address.
• Payment details. Nothing takes a payment yet, and no card is ever typed into this site.

What other people can see

A rating is private until you publish it. Publishing puts it on your public page, in the social feed, and in search results if a search engine finds it. Your handle, display name, picture and biography are public whenever your profile is.

Your email address is never shown to anyone. The public side of this site addresses people by handle, and the code that shapes public data is written so that nothing carrying an address can leave it.

Who else touches it

• Vercel hosts the site and keeps ordinary server logs.
• Supabase hosts the database, in a data centre in Mumbai, India.
• Deezer provides the catalogue. Those requests are made by the server, so Deezer sees the server rather than you.
• Discogs and Deezer's image servers serve some album covers directly to your browser, which means they see your IP address and browser version for those images. Most covers come through this site instead.
• Google, only if you choose to sign in with it.

Nobody in that list is paid to profile you, and none of them are given your ratings.

How long it is kept

Your account and everything in it stays until you delete it. Delete a review and it goes. Ask for the account to be deleted and everything above goes with it, including published reviews and comments. Backups roll off on their own within thirty days.

What you can ask for

A copy of everything held about you, a correction, or deletion. Write to medicalbruh@gmail.com and it will be answered within thirty days. If you are in the UK or EU you can also complain to your data protection regulator; in the UK that is the Information Commissioner's Office.

Children

This site is not for anyone under 13. If an account turns out to belong to a child under 13 it will be deleted along with everything in it.

Changes

If this notice changes in a way that affects what is collected or who sees it, the date at the top changes and the change is announced in the app before it takes effect.