Privacy Policy
Last updated: April 16, 2026
HiddenTrack is a vinyl record discovery app. We respect your privacy and aim to collect as little data as possible.
What We Collect
HiddenTrack does not require an account. We use an anonymous device identifier (generated randomly on your device) to track your saved records and browsing history. This identifier is not linked to your name, email, or any personal information.
Data Stored on Your Device
- Saved record IDs (your collection)
- Personal crates you create
- Seen record IDs per crate (so you don't see the same records twice)
- Optional display name (only if you set one)
- Anonymous device ID
Data Stored on Our Servers
To keep your collection in sync and to enable the community feed, we store the following on our backend (Supabase), keyed only to your anonymous device ID:
- Saved record IDs and seen history
- Community crates you choose to publish (crate name, curated records, and the optional display name you set)
We do not store your name, email, address, location, or any other personal information.
Analytics
We use PostHog for anonymous analytics to understand how the app is used (e.g., which features are popular, crash rates). Analytics data is not tied to your identity and does not include personal information.
Third-Party Services
HiddenTrack uses the following third-party services:
- Discogs API — to fetch album artwork, metadata, and buy links
- Deezer API — to provide 30-second audio previews
- PostHog — for anonymous usage analytics
Each service has its own privacy policy. We do not share your personal data with any of these services.
Affiliate Links
When you tap a buy link in HiddenTrack, it may include an affiliate tag (eBay, Amazon). This helps support the app. The affiliate programs may track your purchase but we do not receive any personal information about you from these programs.
Data We Do NOT Collect
- Names, emails, or contact information
- Location data
- Photos, contacts, or other device data
- Advertising identifiers
Data Sharing
We do not sell, rent, or share your data with third parties for advertising or marketing purposes.
Data Deletion
You can clear all local data on your device at any time by deleting and reinstalling the app.
To request deletion of server-side data associated with your device (saved records, seen history, and any community crates you've published), email privacy@digspindig.com. Please include the names of any community crates you've published (if any) so we can locate and remove the associated records. We will process deletion requests within 30 days.
You can also report or hide any community crate directly from within the app using the … menu on any community crate.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
Contact
Questions about this privacy policy? Reach out at privacy@digspindig.com.