Privacy Policy

Signing in is optional. If you do, we keep the minimum needed to recognize you, we don't share it or sell it, and you can delete it yourself at any time. Rating without an account keeps a random id in your browser.

When you sign in with Discord (scope identify only), we receive and store:

• your Discord user ID;
• your Discord display name (or username if you have none);
• your Discord avatar image URL.

If you rate sleeves, we also store your ratings (1 to 5 stars per sleeve).

We do not request or store your email address, your servers, your messages or any other Discord data. The temporary access token Discord issues during sign-in is used once and revoked immediately.

After sign-in, a random token is stored in your browser as a cookie. On our side, only its SHA-256 hash is kept, linked to your account and to an expiry date 30 days later; the token itself is never stored. A second cookie, valid for ten minutes, is used during sign-in to protect against forged requests. Both are strictly functional.

To identify your account and to attribute your sleeve ratings to it. We also keep a log of your rating actions (which sleeve, the previous and new value, and when) so moderators can undo abuse. Nothing else.

If you are a Curator, you are part of Vernon's editorial team: a track the team rates 4 or 5 can become one of Vernon's picks on the blog. A pick shows the team's rating, never who gave it.

We do not share your data with third parties and we never resell it. It is stored in a managed Redis database, and the site is hosted on Vercel, which process it on our behalf. Vernon also uses Vercel Analytics and Speed Insights for aggregate audience and performance statistics; these do not use cookies and are not tied to your account.

The sleeves you like are kept in your browser, not on our servers, whether you are signed in or not.

When you press the export button, the list of those tracks (titles, artist names, recording codes (ISRC), genres and sub-genres only, 200 at most) is sent to our server, which passes it on to Soundiiz, a third-party service, with a playlist name drawn from those genres, to prepare an import page and get the link we show you (valid 24 hours). The list carries no account information and is sent to Soundiiz from our server, not from your device; we keep no copy of it. Once you open the link, you are on Soundiiz, under its own privacy policy.

You can rate a sleeve without signing in. At your first rating, Cloudflare Turnstile checks that you are a person (see below). Your browser then keeps a random visitor id, signed by us, and the stars you gave, in its local storage. We store each rating (1 to 5 stars per sleeve) under that id, so that it counts in the averages. The id is tied to no account; it lasts 30 days and is renewed at each rating. Clearing your browser's data removes it from your browser; the ratings already given stay in the averages.

Soundiiz accepts only a few exports a minute from our server, shared by every visitor, so we first check that the request comes from a person and not from a script. So does your first rating without an account. This check is done by Cloudflare Turnstile, and only at these two moments: Turnstile is not loaded on the rest of the site.

At that moment your browser contacts Cloudflare, which receives your IP address and technical information about your browser and device to tell people from scripts; we also pass your IP address along when we ask Cloudflare to confirm the result. We only get back whether the check passed. It is not tied to your account and works without signing in. Cloudflare processes this data under its Turnstile Privacy Addendum.

You can delete your account at any time from your account page (available once signed in). Deletion is immediate: your account record and all of your active sessions are removed.

Your ratings are anonymized rather than deleted: they keep counting toward a sleeve's average but are no longer linked to you, and the log of your rating actions is deleted. Future contributions such as tag proposals will be treated the same way.

We may update this policy; the date above shows the latest revision.