Privacy
Short version: waxr's analytics are anonymous by design, we don't sell personal data, and if you make an account you can delete it.
Who we are
waxr ("we") is operated by a UK limited company whose registered details are being added to this page. Until then, address any privacy question to the email below and we will identify the controller in our reply. For any privacy question, email hello@waxr.app.
Analytics — anonymous by design
To understand how the site is used we record page views, basic performance (load speed), and a few interactions (e.g. choosing a ship-to country). These are tied to an anonymous visitor token, not to you. We store your country only— derived from your IP by our host and then discarded; we don't keep raw IP addresses, and analytics holds no emails or per-person profiles. Any figures we publish or share are aggregated and anonymized.
If you make an account
We store what the account needs to work:
- your email and chosen @handle (your password is handled by our auth provider and we never see it);
- your activity — who you follow, your Have / Want records, and crates you create;
- a push-notification token, only if you opt in to drop alerts;
- if you connect Discogs, we read your own public wantlist to match it — never anyone else's data or the Discogs catalogue.
We use this to run the service, show your feed and wants, and send only the alerts you asked for.
Cookies & storage
A sign-in session cookie (only if you log in), the anonymous visitor token, and your preferences (theme, ship-to territory, currency) kept in your browser. No third-party advertising trackers.
Who processes data for us
Supabase (accounts + database), Vercel (hosting), Google Cloud (the hourly store poll), Google Workspace (email), and a web-push service for alerts. We don't sell your personal data.
Your rights
You can ask us to access, correct, export, or delete your data, and delete your account outright — email hello@waxr.app. Depending on where you live (e.g. UK/EU GDPR), you may also have the right to complain to your data-protection authority. Governing law: England & Wales.