Privacy

Information you provide

An account requires an email address and a public username. Your email is used to send Authentication Links and help operate your account; it is not displayed on your public profile.

If you choose Sign in with Google, Aficionado receives your verified email address and Google’s opaque stable subject identifier. Aficionado stores that subject only to recognize the same Google identity later and does not request, use, or store your Google profile, name, photo, contacts, or other Google data. Authorization codes, ID tokens, access tokens, and refresh tokens are not retained.

Your username and any display name, bio, or Profile Picture you provide remain public. Scrapbook and Radar each start Public; you can make either collection Private from its tab on your Profile without changing the other. Visitors cannot see a Private collection’s Works, Reflections, Meaningful Encounter dates, or other memories, including through direct links. Lists have separate settings: Public Lists appear on your Profile, while anyone with an Unlisted List’s link can open it. Collection privacy does not change List visibility. When you first keep a Work from someone’s Scrapbook, Radar, or Named List, they can receive an email or in-app notification, even if your destination is private or an unlisted List. The notification identifies you, the Work, their source collection, and your destination type; it does not include your destination’s title or link. You can turn email notifications about keeps from your own collections on or off in Notification Settings. In-app notifications are always enabled.

Conversations are private exchanges between two people about a Work or a List. Aficionado stores their messages to show them to both of you. You can edit or remove your own messages; the other person sees the change, and a removed message keeps only its place in the conversation. If either of you deletes their account, the other person keeps the conversation, with the deleted person’s messages shown without their name.

When someone sends you messages, Aficionado can email you a copy of the unread ones through its email provider. Aficionado stops keeping that copy once the provider accepts the email; editing or removing a message does not change an email already sent. You can turn conversation emails off in Notification Settings, stop new conversations in Conversation Settings, and block someone at any time.

If you report someone from a conversation, Aficionado blocks them for you and keeps a copy of the latest messages in that conversation, with your optional explanation, so it can review the report. Reports are deleted with the reporting account.

When you remove a Work from your Profile, the removed Work and its personal details remain stored so you can restore them. They remain until your account is deleted.

Aficionado keeps only the normalized square version of a Profile Picture, not the original file or crop settings. Replacing or removing it makes the old address unavailable immediately, although cached copies may remain for up to five minutes and provider backups may persist temporarily.

Other information we handle

Aficionado may handle:

• authentication and session records;
• account-linked product analytics, including your email as an account identifier, normalized page views, and a small set of tagged interaction events;
• session recordings of non-administrative pages, with typed inputs, displayed authentication emails, embedded page data, and URL query strings concealed;
• error reports and operational logs;
• support correspondence; and
• network information made available by infrastructure services, such as IP addresses and request headers.

Session recordings keep public Profile content on screen so interactions remain understandable. They do not intentionally include authentication emails, typed inputs, Authentication Links, raw search text, network bodies or headers, console output, or administrative pages.

Cookies and local storage

Aficionado uses cookies and browser local storage for sessions, registration, Google authentication state and browser-bound email confirmation, CSRF protection, product analytics, attribution, and session recording. These technologies help authenticate requests, protect forms, understand limited product use, and connect anonymous activity to an account after sign-in.

Catalog searches and artwork

Search queries are sent to the catalog provider selected for the kind of Work you are searching for. Artwork hosts, including Cloudflare Images for some Album covers, may receive ordinary image requests from your browser. If a hosted cover fails, your browser may request the current source image. Hosted Album covers are normally removed seven days after their last active Profile reference. Rights-holder removal suppresses the artwork across the Work and queues deletion of hosted copies; copies already downloaded by a browser cannot be recalled.

Services that process information

Aficionado uses Railway, Google Identity, Cloudflare, Resend, PostHog, and Better Stack to host, authenticate, deliver, monitor, and understand the service. PostHog processes product events and masked session recordings through its United States service, with Cloudflare also processing browser analytics sent through Aficionado’s managed proxy. Catalog searches and artwork may involve Google Books, IGDB, TMDB, MusicBrainz, and the Cover Art Archive. These services process information as needed for their role in providing Aficionado.

Aficionado does not run advertising and does not sell personal information.

Retention

Account and Profile data remain while your account exists. Product analytics and session recordings are retained for no more than 90 days. Other operational data is retained according to the purpose for which each service needs it. Data deleted from active systems may remain temporarily in rotating backups before those backups are replaced.

Children

Aficionado is for people aged 13 and over. It is not directed to children under 13 and does not knowingly collect their personal information. If you believe a child under 13 has an account, contact Aficionado and the account and its data will be removed.

Your requests

You can delete your account yourself, at any time, from Settings. It takes effect straight away.

For access, correction, or other privacy requests, or for help deleting an account, email: