Digthis.club (“we”, “us”) is operated by Roby Saavedra. This policy explains what data we collect when you use digthis.club and how we use it.
What we collect
- YouTube account data — if you connect YouTube, we receive your channel name, channel ID, and avatar URL from Google. We store encrypted OAuth tokens in a secure cookie so we can create playlists on your behalf.
- Playlist activity — when you generate a playlist, we process release metadata from Discogs and YouTube video IDs to assemble your playlist. We do not store your finished playlist on our servers; it lives on YouTube.
- Local browser data — your browsing history within the app, view preferences, and similar settings may be saved in
localStorageon your device. - Analytics — if you accept analytics cookies, we use Vercel Analytics and Google Analytics to collect aggregated usage data (pages visited, general traffic patterns). We do not use analytics for advertising.
- Technical data — standard server logs (IP address, browser type, timestamps) may be processed by our hosting provider.
How we use your data
- To run the core app — discovering releases via Discogs.
- To create public YouTube playlists when you request it through Playlist Builder.
- To keep you signed in to YouTube until you disconnect.
- To understand how the site is used, only if you opt in to analytics.
Legal basis (EEA / UK users)
- Consent — analytics cookies and connecting your YouTube account (you initiate both actions explicitly).
- Legitimate interest — operating and securing the service, including essential cookies and fraud prevention during OAuth.
Data sharing & disclosure
We do not sell your personal data, and we do not share, transfer, or disclose your Google user data to any third party for advertising or marketing purposes. Your Google user data (channel name, channel ID, avatar URL, and OAuth tokens) is used only to operate Playlist Builder and is shared only with the service providers below, each strictly to perform the function described:
- Google / YouTube — your Google user data is sent back to the YouTube Data API to create, populate, and manage playlists on your behalf. It is never sent to Discogs, Vercel, or any other third party. Google Privacy Policy
- Discogs — receives release search queries only (artist, album, genre, etc.); it never receives your Google account information or OAuth tokens. Discogs Privacy Policy
- Vercel — our hosting provider processes encrypted session cookies and server logs in order to serve the app and (if you opt in) aggregated analytics; it does not receive your Google profile data separately from the encrypted session cookie. Vercel Privacy Policy
We may also disclose data if required by law, to protect our legal rights, or to investigate fraud or security issues. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data security
We apply the following safeguards to protect your data, including sensitive data such as your Google OAuth tokens:
- Encryption in transit — all traffic between your browser and our servers, and between our servers and Google's APIs, is sent over HTTPS/TLS.
- Encryption at rest — YouTube OAuth tokens are encrypted before being stored and are never stored in plain text.
- Secure cookie storage — encrypted tokens live in an
httpOnly,Securecookie that is inaccessible to client-side JavaScript and cannot be read by third-party scripts. - Access control — only backend services required to complete a playlist request can decrypt and use your OAuth tokens; we do not share decrypted tokens with any third party.
- Minimal retention — tokens are deleted immediately when you disconnect YouTube, and automatically expire and are purged after 60 days of inactivity.
Cookies & storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
dig_yt_session | Essential | Encrypted YouTube OAuth session (only set after you connect) | Up to 60 days |
dig-cookie-consent | Essential | Remembers your analytics preference | Until cleared |
| Google Analytics | Analytics (opt-in) | Aggregated usage statistics | Per Google's policy |
You can withdraw analytics consent at any time by clearing site data in your browser; the cookie banner will appear again on your next visit. To disconnect YouTube, use Disconnect in Playlist Builder.
Retention
YouTube session cookies are removed when you disconnect or when they expire. Local browser data persists until you clear it. Analytics data is retained according to our providers' policies.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, and to withdraw consent. To exercise these rights, contact us via robysaavedra.com. You may also lodge a complaint with your local data protection authority.
International transfers
Data may be processed in the United States and other countries where our providers operate. Google and Vercel participate in appropriate safeguards for international data transfers.
Children
Digthis.club is not directed at children under 13. We do not knowingly collect data from children.
Changes
We may update this policy from time to time. The “Last updated” date at the top reflects the latest version.