Privacy Policy

• Your account: your email address, password (stored only in scrambled form by our hosting provider), display name, any address you add to your profile, and the language you choose. If you sell, we also keep a permanent record of each version of our seller terms you accept, when you accepted it, and the language of the page you accepted it on.
• If you sell: your listings, including grades, condition and play-test notes, prices and photos, and any pressing you add to our catalog. When a photo is uploaded, we privately record the time it was taken. Notes you import from another marketplace stay private to you.
• Photos taken on your phone: if you use a link to take listing photos on your phone, we record that phone as the device for that link.
• The waitlist: your name, email, city and state, where you sell records now, how many records you're ready to list, an optional link to your Discogs, shop or social profile, and any notes you add. The buyer form asks only for your email. We also record your consent to launch emails and when you gave it, and how you found us when your link carries a tag such as ?src=instagram. If someone you know passes us your name and email because you asked them to, we use them only to contact you about becoming a founding seller.
• Technical information: like most websites, our hosting provider's logs receive your IP address, browser type and the pages you view. Its visitor analytics record each page view: the page's address, the site or link that sent you, your browser and its language, an approximate country, and a random session code kept in a cookie for 30 minutes. Nothing about your GrailBin account is sent with them.
• Hashed IP addresses: to count views and stop abuse, we keep a hashed form of your IP address with release page views, waitlist sign-ups, phone photo links and translation requests. A hash is a scrambled code made from the address. It doesn't show the address directly, and we still treat it as personal information. When you're signed in, release views are counted against your account instead.
• Emails you send us, at hello@grailbin.com or trust@grailbin.com.

• To run your account and the site, and to show published listings to buyers.
• To keep a record of each listing and its photos. Photos on a live listing are locked, and photo times are kept, so the evidence is there if a buyer ever opens a claim.
• To translate a seller's notes when a reader asks (see Translating seller notes).
• To check sellers' listing photos before a listing goes live (see Checking listing photos).
• To send emails about your account and, if you joined the waitlist, about GrailBin's launch and the founding seller program. Emails go out in the language you chose. If you haven't chosen one, they follow the language of the pages you read.
• To decide which sellers to invite first, from what you told us on the waitlist, and to see which outreach works.
• To rank popular releases from view counts.
• To keep GrailBin secure and prevent fraud and abuse, including limits on how often one visitor can use a feature.
• When the law requires it.

We don't sell or rent your information, we don't use it for advertising, and we don't use it to train AI models.

On a live listing, anyone reading it can tap Translate the seller's notes. When they do:

• Only that listing's condition and play-test notes, which the seller wrote, are sent from our server through Lovable's AI gateway to Google's Gemini model. Nothing about the reader is sent.
• Requests go through Lovable's gateway in the European Union to Google's servers in the United States. Lovable's agreements with its model providers let them use what we send only to provide the service, and not to train AI models. Lovable doesn't publish how long they keep it. Lovable logs each request without the notes themselves, because we've turned off the setting that would keep them.
• We save each translation for as long as we keep the listing, including translations of earlier versions of the notes. That way the translation a reader saw stays on record.
• To limit abuse, one visitor can ask for up to 30 translations an hour. We keep a hashed form of the visitor's IP address with each request for 30 days.
• Every translation is labelled as a machine translation, and the seller's original notes are what count.

If you sell, your notes may be translated this way for readers who use GrailBin in another language.

When a draft listing has its required photos, our server sends them through Lovable's AI gateway to Google's Gemini model. It sends them again if the seller changes those photos, and our team may also run the check on any listing to test it.

• What's sent: only the required photos, usually the front and back covers and both sides of the record. The seller's name, email and other account details aren't sent, and the photos carry no location data.
• What the check does: it looks at whether each photo shows what it should, and reads the pressing details printed on the record and sleeve, the vinyl color and any visible defects. It also guesses the grade. We store that guess, but we never show it to sellers or buyers, and we don't use it.
• At our providers: Requests go through Lovable's gateway in the European Union to Google's servers in the United States. Lovable's agreements with its model providers let them use what we send only to provide the service, and not to train AI models. Lovable doesn't publish how long they keep it. Lovable logs each request without the photos themselves, because we've turned off the setting that would keep them.
• What we keep: what the check found, the seller's answers to its suggestions and any notes from our team, for as long as we keep the listing. Buyers never see them.
• Suggestions, with one exception: a draft with a photo that isn't a record or its sleeve, or with photos of a different record, waits until the seller retakes the photo, or asks our team to look and a person agrees it's right. Nothing is rejected or removed, and everything else is a suggestion the seller can ignore.
• What we don't do: we don't use face detection or any other biometric features, and we don't use the photos or the results to train AI models. People, not software, decide claims, grades and penalties.

The site uses these cookies and browser storage:

• The gb_lang cookie remembers the language you picked with the language switcher, for up to 400 days. It's set only when you pick a language; visiting a page never sets it. If you're signed in, your choice is also saved on your account.
• Your sign-in is kept in your browser's storage so you stay signed in.
• Small display preferences, such as whether the browse filters are open, are kept in your browser's storage.
• The session-id cookie is set by Lovable's visitor analytics. It's a random code that groups the pages you view in one visit, and it expires after 30 minutes without activity.
• The __dpl cookie is set by our hosting to keep you on the same version of the site during a visit.
• The __cf_bm cookie is set by Cloudflare to tell people apart from automated traffic. It expires after 30 minutes without activity.

While we offer Spanish, if you haven't picked a language and your browser asks for Spanish, we show you our Spanish pages.

We don't use advertising cookies or track you across other websites. Our site doesn't respond to browser "Do Not Track" signals, because we don't do the cross-site tracking they're meant to stop.

Public: published listings, with their photos, grades, notes and any translations, and the seller's display name. Anyone can see these, and search engines may show them.

Private: drafts, notes imported from another marketplace, photo times, your email and your address. Only you and GrailBin's administrators can see them, and our database enforces that.

Service providers, only to do their work for us:

• Lovable hosts our site, database, files and email, runs the AI gateway, and records site visits. Private photos and evidence photos are stored here. Lovable uses its own providers to do this work.
• Cloudflare stores and delivers published listing photos (from images.grailbin.com) and stores our encrypted backups.
• Google runs the Gemini model that translates seller notes and checks listing photos, through Lovable's gateway.

Legal and safety: when the law requires it, or to protect GrailBin, our users or others from fraud or harm. That includes copyright complaints: if a photo is taken down after one, we keep it privately.

A sale or merger: if GrailBin is sold or combined with another company, your information may transfer to the new owner, who must honor this policy for information collected under it.

When we delete something, copies in our backups are gone once those backups expire.

• Our database, not just our app screens, decides who can see what.
• Only GrailBin's administrators can see waitlist sign-ups, private photos and photo times.
• Private photos are shown only through short-lived links.
• Listing photos are re-encoded in your browser before upload. That removes the GPS location and other hidden details your camera adds.
• Our nightly backups are encrypted with a key that only we hold, never stored with our hosting providers.

No system is perfectly secure, but we use reasonable safeguards and limit access to the people who need it. If you find a security problem, see Found a security issue? on our Trust & Safety page.

• See, correct or delete your information: email trust@grailbin.com. We respond within 30 days, and we may ask you to confirm it's you.
• What we can't delete: a published or sold listing's record and photos while they're evidence for a claim, and anything the law requires us to keep. If we keep something, we'll tell you what and why.
• Close your account: email trust@grailbin.com.
• Emails: every launch email has a way to unsubscribe. We still send emails your account needs, such as password resets.
• Language: change it anytime with the language switcher. Clearing your browser's cookies removes the choice from that device.

GrailBin is for people 18 and older. We don't knowingly collect information from children under 13. If you think a child has given us information, email us and we'll delete it.

This policy is available only in English. Where grailbin.com is offered in other languages, those translations are for convenience only.

If we change this policy, we'll post the new version here with a new "Last updated" date. If a change affects how we use information you already gave us, we'll email you first.

Questions or requests: trust@grailbin.com. GrailBin is operated by MGC Property Holdings LLC, based in Florida.