Privacy Policy
Last Updated: February 7, 2026
Your privacy is of paramount importance to us. This Privacy Policy outlines how Chris Nohall ("we," "us," or "this website") collects, uses, and protects your information when you visit and use our website and services.
1. Information We Collect
We collect information to provide and improve our services. This includes:
- Automatically Collected Information: When you visit our website, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the site, and information about how you interact with the site. We refer to this automatically collected information as "Device Information." This is primarily used for website analytics.
- Information You Provide Voluntarily:
- Contact Form: When you use the contact form on our website, we collect your name and email address, along with any message you provide. This information is used solely to respond to your inquiries.
- Discogs Integration (Vinylexport & Vinylsync): When you authorize our services (like Vinylexport or Vinylsync) to connect with your Discogs account via OAuth, we access your Discogs username and collection data (artist, title, year, format, label) exclusively to provide the requested export or synchronization functionality. We do not store your Discogs collection data on our servers after the processing is complete.
- Subscription Services (e.g., Lemon Squeezy - *Future Integration*): If and when we introduce subscription-based services, we will collect information necessary for managing your subscription, which may include your email, payment information (processed by third-party payment providers like Lemon Squeezy), and subscription status. This will be linked to a user account within our system.
2. How We Use Your Information
We use the information we collect for various purposes, including:
- To provide, operate, and maintain our website and services.
- To improve, personalize, and expand our website and services.
- To understand and analyze how you use our website.
- To develop new products, services, features, and functionality.
- To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.
- To process your transactions and manage your orders.
- To find and prevent fraud.
- For compliance with legal obligations.
3. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and analyze site usage.
- Essential Cookies: These cookies are strictly necessary for the operation of our website, enabling core functionalities like security, network management, and accessibility. For example, cookies used for Discogs OAuth authentication (`discogs-vinyl-export-token`, `discogs_oauth_secret`) are essential for providing the Vinylexport and Vinylsync services. Your explicit consent is not typically required for these cookies, but you can disable them through your browser settings, which may affect how the website functions.
- Analytics Cookies: We use Vercel Web Analytics to understand how visitors engage with our website. These analytics are privacy-friendly, do not use cookies, and do not track personal data. They provide anonymized data on page views, unique visitors, and referral sources.
- Consent Management: We use a cookie consent banner to inform you about our use of cookies and to manage your preferences for non-essential cookies. You can accept or decline non-essential cookies. Your choice will be stored in your browser's local storage.
By accepting our cookie policy, you consent to the use of cookies as described in this policy. You can manage your cookie preferences at any time through your browser settings.
4. Third-Party Services
We interact with the following third-party services:
- Discogs API: Used for OAuth authentication and fetching user collection data for Vinylexport and Vinylsync. Interactions are governed by Discogs API Terms of Use and Privacy Policy.
- Vercel: Our website is hosted on Vercel, which provides hosting infrastructure, analytics, and logging services.
- Lemon Squeezy (*Future Integration*): If and when subscription services are introduced, Lemon Squeezy will act as our payment processor and license management platform. Your payment information will be processed securely by Lemon Squeezy.
5. Data Storage & Protection
When you use services requiring authentication, such as Discogs integration, relevant access tokens are stored in secure, HTTP-only cookies in your browser. These tokens facilitate authenticated requests to third-party APIs through our backend service.
**We do not store your Discogs collection data on our servers long-term.** All collection data processing occurs in real-time and is not retained after the request is complete.
**For *future* user accounts and subscription data (with Supabase):** When a database is implemented, any personal data associated with user accounts and subscriptions will be stored securely. We will implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
6. Data Sharing
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for marketing purposes. We may share information with trusted third parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.
7. Data Retention & Deletion
We retain collected information for as long as necessary to provide you with the requested service and for legitimate and essential business purposes, such as maintaining the performance of the service, making data-driven business decisions about new features, complying with our legal obligations, and resolving disputes.
If you have integrated with Discogs, you can revoke our access at any time through your Discogs account settings. For personal data stored in our *future* user database, you will have the right to request access, correction, or deletion of your data.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- The right to access the personal data we hold about you.
- The right to request the correction of inaccurate personal data.
- The right to request the erasure of your personal data.
- The right to object to the processing of your personal data.
- The right to data portability.
To exercise any of these rights, please contact us using the details below.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact us at: support@nohall.dev