Privacy Policy

1) Who We Are

Data Controller: Record Shops Near Me, Italy. Contact: support@recordshopsnearme.com.

2) Scope

This Policy explains how we collect, use, disclose, and protect personal data when you use recordshopsnearme.com and related services (the "Services"). The EU General Data Protection Regulation (GDPR) and applicable Italian law govern this processing.

3) Data We Collect

• Account & Auth Data: email address, passwordless tokens, basic profile IDs.
• Content Data: store submissions, favorites, reviews, messages you send us.
• Usage & Device Data: pages viewed, features used, referrers, coarse location (city/region/country), IP addresses, device and browser information, masked public page layout and interactions, and error records. The data depends on the purpose and your optional choices, as explained below.
• Transactional Data: sponsorship tier selections, payment identifiers (processed by Stripe).
• Cookies & Similar: cookie IDs, tracking choices, and related metadata (see Cookie Policy).

4) Sources

We collect data directly from you, automatically via your device/browser, and from third-party services integrated into our platform.

5) Purposes & Lawful Bases

• Provide the Services (account, listings, maps, payments) — Art. 6(1)(b) contract.
• Usage measurement and browser diagnostics — measure public visits and actions under the controls below.
• Masked public session replay — record public page activity under a separate replay control.
• Service reliability and abuse prevention — Art. 6(1)(f) legitimate interests in operating and protecting the service.
• Communications (service emails, updates) — Art. 6(1)(b) contract; marketing only with consent — Art. 6(1)(a).
• Legal compliance (tax, requests) — Art. 6(1)(c) legal obligation.

Analytics and masked session recordings start automatically. You can explicitly reject either purpose at any time. Refusal does not prevent access to the site. Essential service and security processing remains active, including first-party browser fault reports, server error records, and request rate limits.

Open Privacy choices in the footer to allow or refuse each optional purpose. Withdrawal stops future optional collection. It does not automatically erase earlier records or affect earlier lawful processing. Contact us to request deletion or exercise your other rights.

6) Key Processors & Services

• Supabase (database, auth, storage)
• Vercel (hosting)
• Cloudflare (CDN/WAF)
• Mapbox (maps/tiles/geocoding)
• Stripe (payments)
• PostHog (EU project; optional cookieless usage measurement and optional masked public session replay)
• Vercel Web Analytics (optional usage measurement)
• Sentry (error and performance monitoring)
• Upstash (request rate limits and abuse prevention)
• Resend (emails, if used)

The Analytics choice covers PostHog, Vercel Web Analytics, Supabase usage records, and Sentry browser diagnostics. The separate Session replay choice covers PostHog recordings. We do not use Sentry session replay. Vercel Speed Insights is disabled and does not collect new performance data.

PostHog usage measurement uses no browser-stored visitor identifier. Its server derives a daily hash from request information, including IP address and user agent. The daily hash limits matching across different days. It does not set the storage period for event records. We do not send account IDs, names, emails, form contents, or search text to PostHog.

Replay starts automatically on permitted public pages unless you reject it. It retains fixed public control labels and masks other page text and input values. It excludes forms, dialogs, privacy controls, private pages, images, and maps. Replay identifiers stay in page memory and are not linked to your account or the daily cookieless browser hash. Page reloads can produce separate recordings. The SDK can briefly test browser storage without retaining visitor identifiers. Saved refusals, Do Not Track, and Global Privacy Control stop optional browser collection. Administrator sessions, unknown account roles, and private pages also block optional collection.

Vercel estimates your country, region, and city from your IP address. These estimates can be inaccurate or unavailable. We send these estimates to PostHog while Analytics is enabled. This location request excludes account data and cookies. We do not send your IP address, GPS coordinates, or postal code in these location fields.

Supabase usage measurement uses a browser sessionStorage identifier while Analytics is enabled. Some visit and environment records can link to your account after sign-in. Server, network, and security systems can receive your IP address when they handle a request. Upstash rate-limit keys can contain your IP address or account identifier to detect excessive requests.

First-party browser fault reports remain active independently of tracking choices for service reliability. They send sanitized error messages, stack information, page paths, and technical context to RSNM. The server can add your account ID and browser user agent. These reports are separate from optional Sentry browser diagnostics and are not usage analysis.

Provider details: PostHog, Vercel Web Analytics.

7) Sharing

We share data with the processors above, with authorities where required by law, and with other parties with your consent. We do not sell personal data.

8) Retention

PostHog session recordings have a configured 30-day storage period. That period does not apply to PostHog analytics events or other providers. Their records follow the relevant provider storage settings. Vercel reporting windows describe available reports and do not promise deletion when a window ends.

Supabase usage records have no automatic age-based deletion rule in the current application. Records remain until account deletion removes account-linked records or an administrator erases them. Records without an account link require administrator erasure.

Your browser stores the optional choices, notice version, and choice time until you change or clear them. If browser storage is unavailable, the choice applies only to the current page. Service error and security records follow database and provider storage settings.

If you request account deletion, we process a verified deletion request and remove or anonymize account-linked data. We may retain limited records where legally required (for example fraud prevention, tax/accounting, or security incident evidence).

9) Security

We use technical and organizational measures (encryption in transit, access controls, least-privilege) to protect personal data. No method of transmission or storage is 100% secure.

10) International Transfers

Our PostHog project uses its EU ingestion service. An EU endpoint does not establish that all processing stays inside the EEA. Sentry uses a US ingestion endpoint. Other providers can also process data outside the EEA.

Contact us for information about the processing locations and safeguards that apply to your data. Provider policies describe their general arrangements. They do not establish which agreements apply to RSNM.

11) Your Rights

• Access, rectification, erasure
• Restriction and objection to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali)

To exercise rights, contact us at support@recordshopsnearme.com.

12) Children

Our Services are not directed to children under 13. If we learn we collected personal data from a child, we will delete it.

13) Changes to this Policy

We may update this Policy and its "Last updated" date. We will explain material changes before new processing starts, where required. Analytics and masked session replay follow your saved tracking choices. Existing rejections remain in effect when this notice changes.

14) Contact

Email support@recordshopsnearme.com