Privacy policy

What we collect

Your email address, the only identifying data we ask for. No password is stored; sign-in codes are stored hashed and expire after ten minutes.

Your collection: the items you add, with the display information copied from the catalogue at the time of adding, your collections, the condition you report, your notes, and the prices and dates you enter.

The photographs you take to replace a cover. They are served only to you, and to anyone with a sharing link you created while it is active; they are not cached by our delivery network. A photo you propose to the catalogue and that is accepted is copied there and becomes public.

Your settings: language, display currency, theme, default country.

Where your sign-up came from, recorded once when the account is created: the kind of page you came from (catalogue, home page, another site…) and, if it is a page of our public catalogue, its address. It tells us which pages make the service known.

Barcodes you scan without result, recorded on their own, with no title or other data, to measure what the catalogue is missing.

The technical data your browser sends with each request, including the IP address, processed by our host and delivery network to serve pages and repel attacks.

Why, and on what basis

Providing the service you asked for — keeping your collection, signing you in, showing values: performance of our contract.

Completing and correcting the catalogue, measuring what it lacks, computing values from reported prices: our legitimate interest in maintaining a useful catalogue, weighed against the fact that none of this produces any decision about you.

Keeping the service secure and meeting our legal obligations.

No advertising, no sale of data, no profiling, no automated decision-making about you.

What becomes of the prices you report

A reported price is copied into the catalogue's records without your name, your email address or your account identifier: the observation carries the amount, its currency, its date, the condition of the item and the edition.

It also carries a cryptographic fingerprint derived from your account and the edition concerned, using a secret key held only by us. It serves solely to avoid counting the same person twice in the same average. Because it depends on the edition, it does not allow your observations to be grouped together, and does not allow tracing back to you.

These observations are used to compute medians displayed publicly. No individual amount is published as such.

If you delete your account, these observations are deleted with it.

Audience measurement

We measure audience with a tool we host ourselves, without cookies and without identifiers: we count page views and a few usage events, never a person. That measurement sends nothing to anyone.

No third-party measurement tool: no Google Analytics and no ad network, on the public catalogue or in the application.

Cookies and local storage

Two cookies, both necessary to the service: your session cookie, which keeps you signed in, and the one that remembers the light or dark theme. No audience-measurement or advertising cookie.

Your browser also keeps a read-only offline copy of your own collection, so that the question “do I already own this?” can be answered without a network. That copy stays on your device and disappears with the site's data.

Who else has access

No one, apart from the strictly necessary technical providers, who act on our instructions and do not use this data for their own purposes. They are listed below.

If you create a sharing link, anyone who has that link sees the items in the collections you chose: title, artist or author, year, format and cover, including your own photos. Never your prices, notes, item condition or email address. These pages are not indexed by search engines. You can turn a link off at any time; we count how often it is opened, without keeping anything about who opens it.

Data is neither sold, nor rented, nor passed to advertisers.

Transfers outside the European Union

Servers, the database and photographs are hosted in Germany. Three providers are established in the United States: the delivery network, the sending of sign-in emails, and the public catalogue's audience measurement if you accepted it. These transfers are covered by the European Commission's standard contractual clauses.

For how long

Your data is kept as long as your account exists. Deleting the account erases it immediately, including your photographs and your price observations.

Technical backups rotate over forty-eight hours: beyond that, nothing remains.

Barcodes scanned without result, which contain no personal data, are kept to measure catalogue coverage.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. Exporting your collection and deleting your account are available directly in the settings, without writing to us.

For anything else, write to us: we answer within a month.

You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris.

Processors

• Hetzner Online GmbH · Allemagnehébergement des serveurs, de la base de données et des photos
• Cloudflare, Inc. · États-Unisdiffusion du site et protection contre les attaques
• Resend · États-Unisenvoi des courriels de connexion