MISC5 / PRIVACY POLICY

Privacy Policy

Last updated: July 17, 2026 ／ 日本語

This policy applies to both the "MISC5 Shelf" web app (the "Service") and its companion browser extension, "MISC5 Shelf Extension" (a fork of web-scrobbler, the "Extension").

1. Information We Collect

  • Account information — the email address you register with, and a salted hash of your password. We never store your plaintext password.
  • Playback history — track title, artist, album, album art image URL, and playback timestamp, detected by the Extension on supported sites. The Extension sends this information to the Service, associated with the account you're logged into.
  • Extension connection data — a device token pair used to link the Extension to your Service account. The server only stores a hash of the access and refresh tokens, never the raw values.

2. Information We Do Not Collect

We do not collect your browsing history outside supported sites, do not use advertising trackers, do not collect location data, and do not collect any personal information beyond what's needed for the Service to function.

3. How We Use This Information

Collected information is used solely to build and display the "record shelf" (a 3D visualization of your playback history) for your logged-in account. We do not sell or share this data with third parties, and we do not use it for advertising.

4. Where Data Is Stored

Account information and playback history are stored in Cloudflare D1 (a SQLite-based database).

5. Third-Party Services

Album art images are fetched and displayed through an image proxy on the Service's own server, using URLs the Extension detects on supported streaming sites (e.g. Spotify). This proxy blocks requests to private/loopback addresses as an SSRF safeguard.

6. Remote Code

The Extension only executes code bundled into its package at build time. It never fetches or evaluates scripts from a remote source at runtime.

7. Data Retention, Deletion, and Disconnecting

You can disconnect the Extension from your account at any time from its settings page. To request deletion of your account or your playback history, please contact us using the address below.

8. Contact

For questions about this policy or how your data is handled, contact butter@unitze.net.