Introduction
This Privacy Policy describes how Lazydigger ("we," "us," or "our") collects, uses, and shares your personal information when you use our website https://lazydigger.app (the "Site") and our services (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you disagree with any part of this policy, please do not use our Services.
Age Restrictions
Our Services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.
Information We Collect
We collect several different types of information for various purposes to provide and improve our Services to you:
- Account Information: When you sign in through Google SSO, we receive basic profile information such as your name and email address. Google acts as a data processor for handling authentication and user management.
- User Preferences: We store your liked releases and tracks.
- Usage Data and Logs: Through Axiom, we collect and process log data of application usage. This helps us maintain service quality and security.
- Website Analytics (Umami): To understand how visitors interact with our Site and to improve our Services, we use Umami, a privacy-focused analytics tool. Umami helps us collect anonymous usage statistics (like pages visited, device type, country) without using cookies or collecting personally identifiable information.
Cookies and Tracking
Our Site uses only essential cookies required for basic site functionality (like session management if applicable). Our analytics tool (Umami) is configured to operate without setting cookies.
How We Use Your Information
We use the collected information for various purposes:
- To provide and maintain our Services
- To personalize your music preferences and recommendations
- To improve our Services based on usage patterns
- To communicate with you about Service-related issues
- To detect, prevent, and address technical issues
- To comply with legal obligations
- To ensure the security of our Services through log monitoring
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Performance of our contract with you to provide the Services
- Your consent for processing certain data
- Our legitimate interests in maintaining and improving our Services
- Compliance with legal obligations
Third-Party Services
Our Services integrate with several third-party services:
- Google SSO: Handles user authentication and account management. Please refer to Google's privacy policy for details about their data handling practices.
- Axiom: Provides log aggregation and monitoring services. Log data is processed in compliance with GDPR requirements. For more information, please see Axiom's privacy policy.
- Discogs: Provides music metadata. When you interact with Discogs data, your usage is subject to their privacy policy.
- YouTube: Provides video content. YouTube's privacy policy applies to any interactions with embedded videos.
- Umami: Provides website analytics. We use a self-hosted instance configured for privacy (no cookies, IP anonymization). You can learn more about Umami at Umami's website.
Data Storage and Security
Your data is stored and processed in Germany, in compliance with GDPR requirements. We implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.
Our data processors, such as Google (for SSO) and Axiom (for logs), are carefully selected to ensure they maintain appropriate security standards and GDPR compliance.
While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Data Retention
We retain your personal data only for as long as necessary to provide our Services:
- Account information is retained while your account is active
- Usage logs are retained for 30 days
- Liked releases and tracks are retained until you remove them or delete your account
Your Rights Under GDPR
As a user from the European Economic Area (EEA), you have certain data protection rights under GDPR:
- The right to access your personal data
- The right to rectify inaccurate personal data
- The right to request deletion of your personal data
- The right to restrict processing of your personal data
- The right to data portability
- The right to object to processing of your personal data
- The right to withdraw consent at any time
To exercise any of these rights, please contact us using the information provided in the Contact Us section. We will respond to your request within 30 days.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us: