Privacy Policy

What Plastic collects

Plastic app ("Plastic", "we", "us") operates the Plastic apps and website and is responsible for your information. We collect only the information needed to provide and improve Plastic:

Account information, such as your name, email address, and account identifier.
Your collection, wishlist, folders, tags, notes, and connected Discogs data.
Your username, and the photo, bio, social handles, and links you add if you create a public page.
Photos you choose to capture or upload for album recognition, plus scan results and scan history. Some submitted scan images may be stored to operate and improve the recognition service.
Cover photos you add to records in your Collection, the record each one belongs to, and, if you submit one for shared use, when you agreed and what we decided.
Purchase information if you buy Plastic Unlimited: the plan, the store (Apple or Google), when it started, renews, or ended, the store country, the price and currency, the store's transaction identifiers, and any promo code or Creator Code you entered. Apple and Google take the payment; we never see your card details.
App activity and technical information: which features you use and when, app version and build, device type, operating system, time zone, errors and crash reports, and a notification token if notifications are enabled. We record your approximate country from your connection; we do not keep your IP address with your account activity.
Optional location, only if you allow it, as explained in the next two sections.

Optional iPhone location

On iPhone, Plastic asks whether it can use your location while the app is in use. If you allow it, Plastic uses your location to work out your country, so music-store links and prices match where you are, and saves where you were with each record you scan, so you can remember where you found it. The location is your device's location, which is precise unless you turn off Precise Location for Plastic in iOS Settings.

Plastic does not use location in the background or track you continuously. Saved scan locations are kept with your scans until you delete those scans or your account. This permission is optional: you can decline it or turn it off at any time in iOS Settings, and scanning and the rest of Plastic keep working.

Optional Android scan location

Android may ask whether Plastic can use your approximate location while the app is in use. If you allow it, Plastic requests one fresh approximate coordinate pair when you complete a camera cover scan and stores it privately with that scan record. Location is not requested for gallery uploads.

Plastic does not request precise or background location, continuously track you, reverse-geocode coordinates, or record a store or place name. Saved scan location is not shown in the app yet. It is kept with the scan record until that record or your account is deleted.

This permission is optional. You can choose “Not now,” deny the Android permission, or revoke it later in your device settings. Scanning and the rest of Plastic continue to work without location.

How we use information

We use information to authenticate your account, recognize records, maintain your collection and wishlist, connect services you choose, provide support, prevent abuse, understand reliability and feature use, process purchases, credit creators for referrals, and improve Plastic. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Creator Codes

If you enter a Creator Code, we record the code, the plan you chose, and whether your first purchase qualified, so we can credit the creator who referred you. Creators do not receive your name, email address, account, or collection. They receive a summary of the qualifying purchases and rewards credited to their code.

Your cover photos

You can add your own photo as the cover of a record in your Collection. Before the photo leaves your phone, the app crops it to a square and saves it as a 1024 by 1024 pixel JPEG without metadata, so the file does not carry where or when you took it.

Plastic stores the photo in private file storage at Supabase. Only you can open it, from your signed-in account. We use it to show your cover on your devices and in the share images and recaps you create. If you share one of those images, your cover can appear in it.

We keep the photo until you remove or replace it, or delete your account. It stays if the record leaves your Collection, for example after a Discogs sync, and it shows again if the record comes back. When you remove or replace a photo, we delete it, unless it is still in review or we approved it for shared use. We keep one in review until you withdraw it or we decide. When you delete your account, we delete your private cover photos and the information about them. A photo we approved for shared use stays as the shared cover until a newer approved photo replaces it, without your name (see below).

Cover photos you share

Every cover photo you add is offered as a better cover. You tick Submit as a better cover and confirm the cover terms before you can submit it. We save when you agreed and which version of the terms you saw, and we put the photo in a review queue. A person at Plastic looks at each submitted photo regularly. We do not promise a review time. We check that the photo clearly shows the front sleeve of that record and is better than the cover now shown. Before that, Google Gemini checks each submitted photo automatically for content that is not a record sleeve or not safe to show.

If we approve the photo, we copy it to public file storage. Everyone who uses Plastic then sees it as the cover of that pressing, or of that album if it shows the original sleeve, in the Plastic apps and on myplastic.app. We credit it as "Cover photo contributed by a Plastic collector". We do not show your name, username, or account, and the file name does not contain them. Anyone who sees the photo can copy or pass it on, and anyone with its file address can open it.

If we do not approve the photo, nobody else sees it and it stays your private cover.

You can withdraw a photo while it is in review, in Profile → Settings → Submitted covers. We then do not review it, and nobody else sees it. Withdrawing does not remove your private cover. After we approve a photo, you cannot withdraw it: it stays as the shared cover until a newer approved photo replaces it. If you think a shared cover should come down, for example because it was not yours to share, write to us (see the Terms, "Reports and takedowns"). If you delete your account, a shared photo stays as the shared cover until a newer approved photo replaces it. It never carried your name, and after deletion nothing links it to you.

Public page

Your collection and wishlist are private unless you choose to share them. If you create a public page, or make a Collection, your Wishlist, or All records public, anyone with the link can see it at myplastic.app/@yourusername. A cover can be a photo that a collector chose to share, credited without their name.

The page shows your username and only what you chose to share: your photo, bio, social handles and links, your Records wall, and the Collections, Wishlist, or All records you made public. For each record it shows the cover, artist, title, pressing details, tracklist, album story, and links to music services and Discogs. It doesn't show your name, email address, ratings, notes, condition, prices, or folders, or the exact date you added each record. It can sort by newest and says when a Collection was last updated.

Public pages are marked noindex, which asks search engines not to list them, so people usually find your page through a link you share. Anyone who has the link can still open it, and they can copy or pass on what they see.

To make it private, open Profile → Public page in the Plastic app (on iPhone, then Manage public page) and tap Make page private. Your Collections, Wishlist, and All records go private and your link stops showing them. Your bio and Records wall stay saved in your account in case you relaunch. On the same screen you can also make one Collection, your Wishlist, or All records private on its own.

Your username is your link. If you change it while your page is live, the old username is retired: its link stops working and nobody else can take it, so a link you already shared never leads to someone else's page. You can take a retired username back. While your page is live, you can switch to a new username once every 30 days.

If you delete your account, your public page is removed and your current username is freed, so someone else may claim it later. Usernames you retired earlier stay retired.

When someone opens a public page, we count the visit without cookies, accounts, or IP addresses: which kind of page it was and roughly how the visitor arrived, such as from a shared link or a search engine.

Website analytics and cookies

If you accept analytics cookies, the Plastic website uses Google Analytics to count page visits, reading depth, and clicks on article and app-store links. These website events do not include your Plastic account ID, collection data, search text, or other text you enter. You can deny analytics in the cookie prompt and the site will continue to work.

Service providers and connected services

We share information with service providers only as needed to run Plastic:

Supabase: our database, sign-in, and file storage.
Cloudflare: the website and public pages.
Google: Gemini identifies records from the photos you scan and checks the cover photos you choose to submit, and for harder scans a link to the photo is sent through Serper to Google image search. Google also provides Google sign-in, Google Play purchases, Android notifications (Firebase Cloud Messaging), Android crash reports (Firebase Crashlytics), YouTube, and Google Analytics on the website.
Apple: Sign in with Apple, App Store purchases, iPhone notifications, and Apple Music.
Resend: sending email.
Discogs, when you connect your account, to import and sync your collection and wishlist.
Spotify, Tidal, Apple Music, and YouTube lookups use album and track details, not your personal information.

When you connect or open these services, their own terms and privacy policies also apply. We disclose information when required by law or when reasonably necessary to protect users and the service. Some providers process data outside your country, including in the United States; where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

YouTube

Plastic uses YouTube API Services to find videos for tracks, and plays them in YouTube's official embedded player. By using Plastic you also agree to the YouTube Terms of Service. Google's handling of data collected through the player is described in the Google Privacy Policy.

We do not ask you to sign in to YouTube, and we do not read your YouTube account, watch history, or subscriptions. What we keep is the video link matched to an album, stored with that album in our music catalog rather than with your account, so the same track does not have to be searched again. If you signed in to Plastic with Google, you can review or revoke that access at myaccount.google.com/permissions.

Retention and deletion

We keep account data while your account is active and as needed to provide Plastic. You can permanently delete your account in the app from Profile → Settings → Delete Account, or use our account-deletion page if you cannot access the app.

We may retain limited information when required for law, security, fraud prevention, disputes, or enforcement. Deleted data may remain temporarily in restricted backups until the normal backup cycle replaces them.

Your rights

You can see and change most of your information in the app, and delete your account at any time. You can also ask us for a copy of your data, to correct or delete it, or to stop using it for a purpose, by writing to [email protected]. We answer within 30 days. Depending on where you live, you may have further rights, including complaining to your local data protection authority.

Where the law asks for a legal basis, we process your information to provide the service you signed up for, for our legitimate interests in keeping Plastic secure, reliable, and improving, to meet legal obligations, and with your consent for optional things such as location, notifications, website analytics cookies, and sharing a cover photo. You can withdraw consent at any time.

Children

Plastic is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will delete it.

Security and changes

We use practical technical and organizational safeguards and limit access to people and systems that need it. No internet service can promise perfect security. If this policy changes materially, we will update this page and its date.