Privacy Policy

1. Information We Collect

Account registration. When you create an account we collect your email address and the username you choose. Your email is used only to verify your account and send password-reset links. It is not displayed publicly.

Collection and want list data. Items you mark as "have" or "want," ratings you give, and any preferences you set in your profile are stored and associated with your account. This data powers your personal collection pages and the community counts shown on catalog entries.

Contributions. If you submit an item through the Contribute form, we store the submission data (title, type, year, and any optional fields you fill in) along with your username.

Contact messages. If you send us a message via the Contact page we store your name, email address, and message text so we can respond to you.

Log data. Like most web services, our hosting infrastructure automatically records standard server logs including IP addresses, browser types, and pages visited. These are used for security monitoring and are not linked to personal accounts.

2. How We Use Your Information

We use the information we collect to:

• Create and authenticate your account
• Display your collection, want list, and public profile
• Show community statistics (how many people own or want a catalog item)
• Review and process contribution submissions
• Respond to contact messages
• Send transactional emails (verification, password reset) — no marketing email

We do not sell, rent, or trade your personal information to third parties.

3. Third-Party Services

Cloud infrastructure. The Site is hosted on cloud infrastructure provided by a third-party service provider based in the United States. Your account data, collection records, and interaction data are stored on servers in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States.

Authentication. Account authentication is handled by a third-party identity service. Your password is never stored directly by DoorsInfo — it is managed entirely within that service's secure credential system.

Analytics. We use Google Analytics (GA4), loaded through Google Tag Manager, to collect anonymized usage data — pages visited, session duration, and general geographic region. This data is aggregated and not linked to your account. Whether analytics cookies are set depends on your location and your cookie choice — see Section 4. See Google's Privacy Policy for details.

Bot protection (reCAPTCHA). Our Contact form is protected by Google reCAPTCHA v3. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google to determine whether a submission is from a human or a bot. This data is used solely for security purposes and is subject to Google's Privacy Policy and Terms of Service.

Affiliate links. Want-list pages may display links to third-party marketplaces (Discogs, CD&LP) where you can purchase catalog items. These links may include affiliate tracking parameters. If you click them and make a purchase, DoorsInfo may receive a small commission at no cost to you. Those sites have their own privacy policies that govern what they collect.

4. Cookies, Consent, and Your Choices

How consent works. We use Google Consent Mode to control whether analytics cookies may be set:

• EEA, UK, and Switzerland. Analytics cookies are off by default and are only set if you click “Accept All” on our cookie banner. Your approximate location is determined by Google from your IP address; we do not perform our own location lookup.
• Everywhere else. Analytics cookies are on by default, and you can turn them off at any time by clicking “Decline” on the banner.
• Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of the sale or sharing of personal information. DoorsInfo does not sell or share personal information in any case. GPC does not affect first-party analytics, which is governed by the rules above. If you choose “Accept All” while GPC is on, the banner tells you that this overrides the signal on DoorsInfo.
• When cookies are declined. Any analytics cookies already set on doorsinfo.com are deleted. Google's tags may still send limited, cookieless signals (such as a page having been viewed) without storing or reading any identifiers on your device.
• Remembering your choice. Your banner choice is stored in your browser's local storage (not a cookie) and not sent to our servers. It expires after 13 months, after which we will ask again. You can change it at any time using the Your Privacy Choices link in the footer of every page.

DoorsInfo uses the following cookies:

• Session cookie. A single first-party cookie keeps you logged in between visits. Blocking it will prevent sign-in, but the public catalog is fully accessible without an account.
• Analytics cookies. Google Analytics (GA4) sets cookies to distinguish visitors and measure site usage, subject to the consent rules above. The data collected is aggregated and anonymized. Google Tag Manager, which loads these tags, does not itself set cookies.
• reCAPTCHA. Submitting the Contact form triggers a Google reCAPTCHA check, which may read and write cookies to assess whether the submission is from a human.
• Third-party affiliate cookies. If you click an outbound link to a marketplace such as Discogs or CD&LP, that site may set its own cookies once you land there, governed by its own privacy policy. DoorsInfo does not set or read those cookies.

5. Your Privacy Rights (GDPR — EEA, UK & Similar Jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time — including via our cookie banner — without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint with your local data protection supervisory authority

We process account and collection data to perform our contract with you (providing the service you signed up for) and process analytics data on the basis of your consent, given via the cookie banner. Analytics cookies are not set for visitors in these regions unless they click “Accept All”. To exercise any of these rights, contact us at webmaster@doorsinfo.com.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information — DoorsInfo does not sell or share personal information, so there is nothing to opt out of today
• Non-discrimination for exercising any of these rights

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale or sharing, as described in Section 4. You can also turn off analytics cookies at any time via the Your Privacy Choices link in the footer.

To submit a request, email webmaster@doorsinfo.com. We may need to verify your identity before fulfilling certain requests.

7. Data Retention and Deletion

Account data is retained for as long as your account is active. You can permanently delete your account and all associated data — including your collection, want list, and ratings — at any time from your Profile page. Deletion is immediate and cannot be undone.

If you need assistance or have questions about data removal, contact us at webmaster@doorsinfo.com.

8. Security

We use HTTPS for all connections, store passwords via Cognito's hashed credential system, and follow standard security practices for web applications. No system is perfectly secure, but we take reasonable steps to protect your data.

9. Children's Privacy

DoorsInfo is not directed at children under 13. We do not knowingly collect personal information from anyone under that age. If you believe a child under 13 has created an account, please contact us and we will remove it.

10. Changes to This Policy

We may update this policy from time to time. When we do, the "Last updated" date at the top will change. Continued use of DoorsInfo after a policy update constitutes acceptance of the revised terms.

11. Contact

Questions about this policy? Reach us at webmaster@doorsinfo.com or via the Contact page.