Scott Finkelstein

The short version

Plinthe is a viewer for a Discogs collection you already own. It talks directly from your device to Discogs and to two public music-metadata services. It does not collect, store, sell, or share your personal data, and it does not track you across apps or websites.

What Plinthe stores on your device

Your Discogs access token.When you connect your Discogs account, Discogs issues an access token to Plinthe. It is stored in the visionOS Keychain, marked so it is readable only while the device is unlocked and never synced to other devices or to iCloud. Plinthe never sees or stores your Discogs password — you type it on Discogs’ own web page.
One display preference.Your chosen sort order for the collection grid, kept in the app’s own preferences.
A temporary image cache.Album cover art is cached by the operating system’s standard URL cache so the collection doesn’t re-download every time. It is cleared when the system reclaims the space or when you delete the app.

All of it stays on the device. Deleting Plinthe removes all of it.

What leaves your device, and to whom

Plinthe makes network requests to exactly three third parties. There is no Plinthe server; no request is ever routed through infrastructure we operate.

Service	What is sent	Why
Discogs `api.discogs.com`	Your access token, plus the request itself: your collection listing, release and artist detail, and marketplace price lookups.	To read the collection you asked Plinthe to display.
LRCLIB `lrclib.net`	Artist name, track title, album name, and track duration. No token, no account, no device or user identifier.	To look up time-synced lyrics for the track being played.
Apple iTunes Search API `itunes.apple.com`	Artist name and album name. No token, no account, no device or user identifier.	To find the public 30-second preview for a track when you are not an Apple Music subscriber.

Each of these services receives your device’s IP address as an unavoidable part of any internet request, and each has its own privacy policy governing what it does with the request: Discogs and Apple.

Apple Music playback

If you have an Apple Music subscription and grant permission, Plinthe plays full tracks through Apple’s MusicKit framework. That playback is handled by Apple on your device under your own Apple Account; Plinthe receives no information about your Apple Music library, listening history, or subscription beyond whether playback is permitted. Apple’s privacy policy governs it.

What Plinthe does not do

No analytics or crash-reporting services of any kind.
No advertising, ad identifiers, or IDFA access.
No tracking of you across other apps or websites, and no data shared with data brokers.
No third-party SDKs. Plinthe is built entirely on Apple’s own frameworks.
No Plinthe account, and no Plinthe-operated server that holds your data.
No sale of personal information, under any definition, ever.

Your control over your data

Disconnect at any time.The account menu’s “Disconnect” deletes the Discogs token from your device’s Keychain immediately. Plinthe then has no access to your collection.
Revoke Plinthe’s access at Discogs. Because the token is issued by Discogs, you can also revoke it from your Discogs account settings, which stops it working even if the device is out of your hands.
Delete everything. Deleting the app removes the token, the preference, and the image cache.
Your Discogs account itself — including deleting it — is managed entirely at discogs.com. Plinthe cannot create, modify, or delete a Discogs account.

Children

Plinthe is not directed at children and does not knowingly collect information from anyone. Discogs requires its own users to meet its minimum age requirement.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new “last updated” date. Material changes to what data leaves your device will be described here rather than quietly amended.

Contact

Questions about this policy, or about privacy in Plinthe generally: sbf0202@gmail.com.