Privacywhat we collect and why

No analytics, no tracking pixels, no advertising. The only personal data we collect is the email address you give us if you subscribe to the newsletter.

The controller for personal data processed through this site is the curator running Disquet Discover. Reach us at [email protected]. Postal address is provided on request.

When you subscribe to the weekly newsletter we collect your email address. The legal basis is your consent under Art. 6(1)(a) GDPR, expressed by submitting the signup form and clicking the link in the confirmation email we send you.

Your email is stored with our email provider, Buttondown (Buttondown LLC, USA). Buttondown is certified under the EU-US Data Privacy Framework and processes personal data on our behalf under a standard data-processing agreement. Every newsletter has a one-click unsubscribe link; you can also email us to be removed.

We keep the email until you unsubscribe or ask us to delete it. We do not profile subscribers and we do not share the list.

Record pages embed players from Bandcamp, Apple Music, Spotify, SoundCloud, YouTube, and Deezer. Those players set their own cookies once loaded. We don't load them until you click the consent banner, and you can reset that choice by clearing your browser's storage for this site.

When a player is loaded, your interaction with it is governed by the provider's own privacy policy, not ours. Those providers may process your data outside the European Economic Area.

Our hosting provider records standard web-server logs (IP address, user-agent, referrer, requested path, response code) for up to 30 days. This is Art. 6(1)(f) GDPR, legitimate interest in keeping the site running and dealing with abuse. We do not combine these logs with any other data.

The "saved" list on /saved lives entirely in your browser's localStorage. We never see it. Clearing your browser data deletes it.

Under RODO/GDPR you can access, rectify, erase, restrict, object to, and port any personal data we hold, and lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl). To exercise any of those rights, email [email protected]. We try to respond within a week and have 30 days under the regulation.

If this policy changes, the "last updated" date at the top will change too.