Privacy at disc.id

Information we collect

When a player sets up a URL, we collect their name, URL, and email address.

When someone returns a disc, we collect the photo, pickup note, location when shared, submission time, and the URL written on the disc.

We also record delivery and pickup status, an optional thank-you choice, and basic device and request information to prevent abuse and diagnose failures. We do not store raw IP addresses.

How the information is used

We use this information to maintain player URLs, provide private player dashboards, send return notices, show private return receipts, retry failed deliveries, answer support requests, and prevent abuse.

Who can see it

Other players can see only the player name attached to the URL. They cannot see the player's email address.

We send the player the photo, pickup note, and useful location details without showing their email address to the other player. Returning a disc does not require an account, name, email address, or phone number.

Authorized disc.id administrators can access stored records. Cloudflare stores application data, and Resend delivers email.

Private sign-in, pickup, and receipt links contain random tokens. We store hashed versions of those tokens. A secure session cookie keeps a player signed in to their dashboard.

Storage and retention

Return photos and other information are stored privately. Administrative access requires an authorized account, and photo access is recorded.

We retain player setup and return records so we can operate and support the service. You can ask us to correct or delete your information. We may keep limited records when needed for security, fraud prevention, or legal obligations.

Your choices

Anyone returning a disc can provide a clear pickup note instead of location. Players can update their name, URL, and notification email from the private player dashboard. To request access, correction, or deletion, email hello@disc.id.