Privacy Policy

What Plastic collects

Plastic app ("Plastic", "we", "us") operates the Plastic apps and website and is responsible for your information. We collect only the information needed to provide and improve Plastic:

• Account information, such as your name, email address, and account identifier.
• Your collection, wishlist, folders, tags, notes, and connected Discogs data.
• Your username, and the photo, bio, social handles, and links you add if you create a public page.
• Photos you choose to capture or upload for album recognition, plus scan results and scan history. Some submitted scan images may be stored to operate and improve the recognition service.
• Purchase information if you buy Plastic Unlimited: the plan, the store (Apple or Google), when it started, renews, or ended, the store country, the price and currency, the store's transaction identifiers, and any promo code or Creator Code you entered. Apple and Google take the payment; we never see your card details.
• App activity and technical information: which features you use and when, app version and build, device type, operating system, time zone, errors and crash reports, and a notification token if notifications are enabled. We record your approximate country from your connection; we do not keep your IP address with your account activity.
• Optional location, only if you allow it, as explained in the next two sections.

Optional iPhone location

On iPhone, Plastic asks whether it can use your location while the app is in use. If you allow it, Plastic uses your location to work out your country, so music-store links and prices match where you are, and saves where you were with each record you scan, so you can remember where you found it. The location is your device's location, which is precise unless you turn off Precise Location for Plastic in iOS Settings.

Plastic does not use location in the background or track you continuously. Saved scan locations are kept with your scans until you delete those scans or your account. This permission is optional: you can decline it or turn it off at any time in iOS Settings, and scanning and the rest of Plastic keep working.

Optional Android scan location

Android may ask whether Plastic can use your approximate location while the app is in use. If you allow it, Plastic requests one fresh approximate coordinate pair when you complete a camera cover scan and stores it privately with that scan record. Location is not requested for gallery uploads.

Plastic does not request precise or background location, continuously track you, reverse-geocode coordinates, or record a store or place name. Saved scan location is not shown in the app yet. It is kept with the scan record until that record or your account is deleted.

This permission is optional. You can choose “Not now,” deny the Android permission, or revoke it later in your device settings. Scanning and the rest of Plastic continue to work without location.

How we use information

We use information to authenticate your account, recognize records, maintain your collection and wishlist, connect services you choose, provide support, prevent abuse, understand reliability and feature use, process purchases, credit creators for referrals, and improve Plastic. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Creator Codes

If you enter a Creator Code, we record the code, the plan you chose, and whether your first purchase qualified, so we can credit the creator who referred you. Creators do not receive your name, email address, account, or collection. They receive a summary of the qualifying purchases and rewards credited to their code.

Public page

Your collection and wishlist are private unless you choose to share them. If you create a public page, or make a Collection, your Wishlist, or All records public, anyone with the link can see it at myplastic.app/@yourusername.

The page shows your username and only what you chose to share: your photo, bio, social handles and links, your Records wall, and the Collections, Wishlist, or All records you made public. For each record it shows the cover, artist, title, pressing details, tracklist, album story, and links to music services and Discogs. It doesn't show your name, email address, ratings, notes, condition, prices, or folders, or the exact date you added each record. It can sort by newest and says when a Collection was last updated.

Public pages are marked noindex, which asks search engines not to list them, so people usually find your page through a link you share. Anyone who has the link can still open it, and they can copy or pass on what they see.

To make it private, open Profile → Public page in the Plastic app (on iPhone, then Manage public page) and tap Make page private. Your Collections, Wishlist, and All records go private and your link stops showing them. Your bio and Records wall stay saved in your account in case you relaunch. On the same screen you can also make one Collection, your Wishlist, or All records private on its own.

Your username is your link. If you change it while your page is live, the old username is retired: its link stops working and nobody else can take it, so a link you already shared never leads to someone else's page. You can take a retired username back. While your page is live, you can switch to a new username once every 30 days.

If you delete your account, your public page is removed and your current username is freed, so someone else may claim it later. Usernames you retired earlier stay retired.

When someone opens a public page, we count the visit without cookies, accounts, or IP addresses: which kind of page it was and roughly how the visitor arrived, such as from a shared link or a search engine.

Website analytics and cookies

If you accept analytics cookies, the Plastic website uses Google Analytics to count page visits, reading depth, and clicks on article and app-store links. These website events do not include your Plastic account ID, collection data, search text, or other text you enter. You can deny analytics in the cookie prompt and the site will continue to work.

Service providers and connected services

We share information with service providers only as needed to run Plastic:

• Supabase: our database, sign-in, and file storage.
• Cloudflare: the website and public pages.
• Google: Gemini identifies records from the photos you scan, and for harder scans a link to the photo is sent through Serper to Google image search. Google also provides Google sign-in, Google Play purchases, Android notifications (Firebase Cloud Messaging), Android crash reports (Firebase Crashlytics), YouTube, and Google Analytics on the website.
• Apple: Sign in with Apple, App Store purchases, iPhone notifications, and Apple Music.
• Resend: sending email.
• Discogs, when you connect your account, to import and sync your collection and wishlist.
• Spotify, Tidal, Apple Music, and YouTube lookups use album and track details, not your personal information.

When you connect or open these services, their own terms and privacy policies also apply. We disclose information when required by law or when reasonably necessary to protect users and the service. Some providers process data outside your country, including in the United States; where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

YouTube

Plastic uses YouTube API Services to find videos for tracks, and plays them in YouTube's official embedded player. By using Plastic you also agree to the YouTube Terms of Service. Google's handling of data collected through the player is described in the Google Privacy Policy.

We do not ask you to sign in to YouTube, and we do not read your YouTube account, watch history, or subscriptions. What we keep is the video link matched to an album, stored with that album in our music catalog rather than with your account, so the same track does not have to be searched again. If you signed in to Plastic with Google, you can review or revoke that access at myaccount.google.com/permissions.

Retention and deletion

We keep account data while your account is active and as needed to provide Plastic. You can permanently delete your account in the app from Profile → Settings → Delete Account, or use our account-deletion page if you cannot access the app.

We may retain limited information when required for law, security, fraud prevention, disputes, or enforcement. Deleted data may remain temporarily in restricted backups until the normal backup cycle replaces them.

Your rights

You can see and change most of your information in the app, and delete your account at any time. You can also ask us for a copy of your data, to correct or delete it, or to stop using it for a purpose, by writing to [email protected]. We answer within 30 days. Depending on where you live, you may have further rights, including complaining to your local data protection authority.

Where the law asks for a legal basis, we process your information to provide the service you signed up for, for our legitimate interests in keeping Plastic secure, reliable, and improving, to meet legal obligations, and with your consent for optional things such as location, notifications, and website analytics cookies. You can withdraw consent at any time.

Children

Plastic is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will delete it.

Security and changes

We use practical technical and organizational safeguards and limit access to people and systems that need it. No internet service can promise perfect security. If this policy changes materially, we will update this page and its date.