Privacy Policy

Last updated: July 14, 2026

This policy describes how RSD Tracker handles information when you browse releases, maintain a Want List, enable notifications, or use optional social features.

Information we handle

Browsing does not require an account. If you enable push notifications, the service stores an app installation identifier, APNs device token, bundle identifier, and app version so it can deliver updates.

If you choose to sign in, the service may store a stable account identifier supplied by Apple, your verified email address and display name, an Argon2id password hash, and passkey public credentials (including credential identifiers, counters, device/backup state, and authenticator model identifiers). RSD Tracker never receives the biometric or device PIN used to unlock a passkey. Apple account-change notices are signature-verified; only one-way hashes of their opaque identifiers and payload are retained for replay prevention and lifecycle processing. The service also stores your hosted Want List, crews, memberships, assignments, shopping status, selected price limits, activity, notifications, and sharing preferences.

How information is used

Information is used to operate release tracking, verify and recover accounts, synchronize your account, process Apple authorization, relay, and account-deletion changes, coordinate shopping crews, show shared lists you create, prevent abuse, secure sessions, and send requested notifications. Private notes are not included in public shared-list responses. Price limits are shared only when you explicitly choose to include them.

Sharing and service providers

Crew information is visible to members of that crew. A shared-list link is visible to anyone who receives it until it expires or is revoked, subject to the options you chose. Infrastructure, email-delivery, Apple authentication, and analytics providers process data only as needed to provide their configured service. RSD Tracker does not sell personal information.

The website may use Plausible Analytics to collect aggregate usage information, such as page views and selected feature interactions. The tracker is configured not to send search terms, query strings, precise location, release or crew identifiers, invitation tokens, notes, email addresses, or account handles. Analytics can be disabled by the operator without rebuilding the website.

Storage, retention, and security

Data may be stored on your device, in your private iCloud account when enabled, and on RSD Tracker servers for hosted social features. Session, verification, password-reset, passkey-challenge, invite, and share tokens are stored in hashed form on the server. Verification, reset, and passkey challenges expire and are single-use. An unverified password-only signup may be removed after seven days when it has no live verification link. Other data is retained while your account or feature remains active and for a limited period needed for security, backups, and legal obligations.

Your choices

You can use core browsing without an account, disable notifications in system settings, control whether crew members may assign releases directly to you, and revoke active shared links. An Apple account-deletion notice immediately disables an Apple-only RSD Tracker account, revokes credentials and public links, removes direct account identifiers, and queues any shared-history cleanup that requires preserving crew integrity. Contact support to request removal from or ownership transfer of a crew, an account export, or account deletion, including completion of a queued shared-history cleanup. Some limited records may be retained where required for security or legal compliance.

Children

The hosted social service is not directed to children under 13, and RSD Tracker does not knowingly collect their personal information.

Contact

Questions, access requests, or deletion requests can be sent to support@austinh.net.

RSD Tracker is not affiliated with or endorsed by Record Store Day.