Discogs
- The policy says your content is not used for AI training.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
Discogs collects browsing and inferred data for ads, takes a license on your posts.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, messages, browsing history, device data, inferences, and seller ID photos.
Read the exact line
Privacy policy
“Technical Information Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding Your interaction with the Service”
Training
They use it to run the site, personalize, and show targeted ads; they say they do not train LLMs.
Read the exact line
Privacy policy
“We do not process data for the purpose of training large language models.”
Sharing
Service providers, affiliates, tax authorities, and ad networks if you allow targeting cookies.
Read the exact line
Privacy policy
“We may share information with advertising companies to serve You targeted advertisements, analytics providers, or social media providers.”
Kept
They keep data as long as needed; seller ID can stay up to seven years; messages up to 90 days after delete.
Read the exact line
Privacy policy
“This information is kept on file for up to seven years depending on the applicable regulation pursuant to which it was obtained.”
Controls
Cookie banner, GPC, account privacy settings, and Help Center forms for access, delete, and portability.
Read the exact line
Privacy policy
“You may submit a request for or deletion by completing the of Data form in Our Help Center.”
Fine print
license on your posts, you them.
Read the exact line
Terms of service
“You grant to Us, without restriction or limitation, a worldwide, non-exclusive, , transferable, fully paid-up, right and license, with the right to ”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off targeting cookies or use GPC
Cookie banner / Cookie Settings or Manage Preferences on the site; Global Privacy Control
of your data
of Data form in the Help Center
Adjust notification and privacy settings
User Profile Settings and How To Adjust Account, Notification & Other Privacy Preferences
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can keep using, changing, sharing, and even selling what you post forever, even after you leave.
Read the exact line
Terms of service
“You grant to Us, without restriction or limitation, a worldwide, non-exclusive, , transferable, fully paid-up, right and license, with the right to , to use, copy, display, distribute, modify, create derivative works based on, sell, and otherwise exploit User Content”
For example, a release note you wrote can stay in their catalog and APIs after you delete your account.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and hold Us, and Our subsidiaries, affiliates, officers, agents, co-branders or other partners, and employees, harmless from any alleged claim or demand, including reasonable attorney fees”
For example, if a listing you posted leads to a lawsuit, they can ask you to cover their lawyers.
not a regular court, unless you opt out in time.
Read the exact line
Terms of service
“You and Discogs each agree that all claims, controversies, and/or disputes between You and Discogs, including those arising out of or relating to the Service and/or these TOS, including without limit any privacy claims or data security claims”
For example.
If you allow targeting cookies, they share browsing and inferred interests with ad companies.
Read the exact line
Privacy policy
“This sharing is considered a “sale” or "sharing" under the . Targeted advertisements are considered a “sale” under other US state privacy laws and regulations.”
For example, pages you view can be used to show you ads on other sites.
Sellers may have to give a photo of their ID, treated as biometric data and kept for years.
Read the exact line
Privacy policy
“We may collect other biometric personal data for the purpose of uniquely identifying a natural person, in the form of a photo of You on government identification cards as a part of the seller verification process.”
For example, a passport photo used to verify you as a seller can be stored up to seven years.
They can shut your account for any reason they choose.
Read the exact line
Terms of service
“You agree that We, in Our sole discretion, may terminate Your account (if applicable), and remove and discard any of Your content within the Service, for any reason”
For example, they could close a seller account and discard listings if they decide you broke the spirit of the rules.
Anything you type in the support chatbot is saved so they can improve support.
Read the exact line
Privacy policy
“All chatbot conversations are recorded for use by Us to improve our user support processes.”
For example, a question you type in the help chatbot is stored even if you did not open a ticket.
They say they do not use your personal data to train large AI models.
Read the exact line
Privacy policy
“We do not process data for the purpose of training large language models.”
For example, your marketplace messages are not supposed to be used to train a chatbot model.
You must be 18 or older; they do not describe extra age checks beyond that rule.
Read the exact line
Privacy policy
“The Service is not intended for use by children under 18 years of age.”
For example, a 16-year-old who signs up anyway is told not to use the site, but there is no described ID check for buyers.
They will post updates and say they will notify you of big privacy changes.
Read the exact line
Privacy policy
“We may amend this Policy at any time by posting the amended terms on this site and notifying You of material changes to the Policy along with an opportunity to opt in to changes that require Your consent”
For example, a new ad-sharing practice should come with a notice, not only a silent website edit.
Words to know
Legal words from the lines above, in plain English.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- right to erasure
- Your right to have a company delete the personal data it holds about you, with some exceptions. For example, you can ask a social app to wipe your old posts and profile and it must, unless a law says otherwise.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- data subject rights
- The legal rights you have over your data, such as seeing it, fixing it, deleting it or moving it. For example, you can email the company and ask for a copy of everything it holds about you.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
How we got here · grade B · score 49/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect account and marketplace data plus browsing history, search history, device identifiers, inferences, and messages.
Does it record your voice, face or body, and what happens to that?
Seller verification can use a photo of your government ID as biometric data, with consent, shared with verification providers and kept for years.
Are your chats and uploads used to train AI models, and is that off by default?
They say they do not process data to train large language models.
Can employees or contractors read your conversations, and when?
They may review private messages and account activity when they look into rule-breaking, fraud, or legal issues.
Are you profiled or tracked for advertising?
Targeting, performance, and social cookies can go to advertising and analytics networks for personalized ads.
Do they sell or share your data, and can you opt out?
Cookie sharing for ads is treated as a sale or share under some US laws, with cookie-banner and GPC opt-outs.
What rights do they take over what you type and what the AI makes?
You give them a perpetual, non-revocable, sublicensable license to use and exploit your contributions.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is mainly by Help Center request; some seller ID data can be kept up to seven years and messages up to 90 days after delete.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They draw inferences about preferences and interests for personalization and ads; there is no described AI memory you can edit.
Do they commit to basic security, and have they leaked data?
They describe encryption, access controls, penetration tests, DPF certification, and review of the cloud provider’s SOC reports.
Is there a real age gate, and are teens protected?
You must be 18 or older; they say they will remove under-18 data if they find it, but age is self-declared.
Will they tell you when the rules change, and is the policy specific?
The policy is dated and they say they will notify you of material changes and let you opt in or out where the law requires.
Can they close your account without warning, and can you get your data out first?
They may terminate for any reason and can skip prior notice when they think there are compelling reasons.
If something goes wrong, who pays?
The service is as-is with broad damage limits, and you must indemnify them for claims arising from your use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 10,982 words at a college graduate level (Flesch reading ease 33.5); the terms are 6,154 words at a college level.
