Privacy Policy

Last updated: August 3, 2026

This privacy policy explains what personal data 33rpm processes when you use our vinyl record collection service at 33rpm.media, and on what basis, in accordance with the GDPR and the Austrian Data Protection Act (DSG).

Data controller

Silvertip IT-Solutions GmbH Grabenweg 68, 6020 Innsbruck Austria

Email: info@33rpm.media

Data we collect

  • Account data: email address, display name, password (stored only as a salted Argon2id hash), locale and theme preference, and email verification status.
  • Collection data: the records, folders, tags, and notes you create, condition and purchase details you enter, and photos you upload of your copies.
  • Catalog metadata: artist, release, and track information looked up from MusicBrainz, the Cover Art Archive, Discogs, Deezer, and iTunes to enrich your collection entries.
  • Sharing data: which folders you share, with which groups, and your group memberships.
  • Technical data: IP address, timestamps, and sign-in/security events recorded in our audit log; standard web server request logs.

Purpose and legal basis

We process this data to provide and secure the 33rpm service (Art. 6(1)(b) GDPR – performance of the contract with you, and Art. 6(1)(f) GDPR – our legitimate interest in a secure, reliable platform), to send transactional emails such as verification, password reset, and folder-sharing notifications (Art. 6(1)(b) GDPR), and to enrich your collection with metadata from third-party catalog sources (Art. 6(1)(b) GDPR).

Retention

Your account data is kept for as long as your account is active. If you delete your account, it is deactivated immediately and permanently erased after 30 days. Cached metadata from external catalog sources is kept for 30 days to avoid repeated lookups, then discarded. Security audit log entries (e.g. sign-in events) are kept for as long as necessary for security monitoring and abuse prevention.

Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to receive your data in a portable format. You can view, edit, or delete most of your data directly within the app; for anything else, contact us using the details below. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at).

Contact

Questions about this policy: info@33rpm.media