Privacy policy

Last updated October 16, 2026

Record Tribe collects only what it needs to build and run your record collection site. It never sells your data, never shows ads, and never shares data for advertising.

What is collected and why

Email address, from site owners and the people they invite: for signing in, password resets and account emails.
Password, from the same people: for signing in. It is stored scrambled, so nobody can read it, Record Tribe included.
Discogs username and permission, from site owners: for reading your collection. The permission is stored encrypted.
Your record collection, from Discogs: for building your site.
Listens and loves, from the people who log them: for the family and friends features on the site.
Photos and writing you add, from site owners: for showing them on your site.
Site settings, from site owners: your site's name and choices.
The internet address of a sign-in or signup: for stopping password guessing and fake signups. Kept for a day.

What is public

A site is a public website. Anyone can see:

the records in the collection, and the writing the owner publishes
the first names of the people who logged listens or loves, next to those records
the site on Record Tribe's main page, unless the owner turned that off

Never public: email addresses, passwords, the Discogs permission, and settings.

Outside services

These services handle some data so Record Tribe can work. None of them get your data to sell or advertise with.

Discogs: the source of your collection. Record Tribe reads it with the permission you give.
Cloudflare: every visit passes through it, for speed and security. Its Turnstile check on the signup form stops bots.
Google: sends Record Tribe's emails.
Apple: song previews play from Apple's servers, so Apple sees your internet address when you press play.
Google Analytics: counts visits to the sites, as described under Cookies.
Hosting: the company that hosts Record Tribe's server, and the tool used to manage it.

Cookies

Record Tribe uses no advertising cookies. It uses:

Google Analytics cookies, which count visits. Google receives details of each visit, such as the pages viewed, the device and a rough location, and Record Tribe uses them only to see how the sites are used. Admin and account pages are not counted.
a sign-in cookie, which keeps you signed in while you use the site
a "remember me" cookie, if you choose it, which keeps you signed in for 30 days
your light or dark choice, stored in your own browser

A sign-in on one site never works on another.

Email

Record Tribe emails you only about your account: verifying your email, resetting your password, confirming you deleted your site. Site owners may also get occasional news, and every one of those emails has an unsubscribe link. Family and friends invited to a site get no news emails.

Keeping and deleting your data

When an owner deletes their site, it goes offline straight away, and they have 7 days to log in and restore it. After that, its pages, uploads, writing, and its family and friends' accounts and activity are deleted. Copies in old backups are gone within 30 days.

Family and friends on a site can ask its owner to remove them, which deletes their account and activity.
Album and artist details from Discogs are public facts shared across Record Tribe. They stay, but no longer connect to you.
You can withdraw Record Tribe's Discogs permission at any time in your Discogs settings.

Children

Record Tribe is not for children under 13, and does not knowingly collect their data.

Changes and questions

Changes to this policy are announced on Record Tribe's main page, in every site owner's admin, and by email before they take effect. Questions go to hello@recordtribe.com.