Privacy Policy

What we collect

CrateDrop collects only what is necessary to operate. If you create an account, we store your email address and a hashed identifier from your OAuth provider. If you use the app without an account, we store only an anonymous session cookie to preserve your listening history for the current session. We do not collect any payment information — the service is free.

How we use it

Your email is used only for authentication (magic link sign-in). Discovery history is stored to power the “previous track” feature. Audio analysis results are cached globally so all users benefit from a faster experience — your listening does not create a personal audio profile that is shared or sold.

Third-party services

• Discogs — music metadata and release data. Subject to Discogs privacy policy.
• YouTube — embedded video playback. Google may collect data through embedded players per their privacy policy.
• Google AdSense — advertising. Google may use cookies to serve relevant ads based on your browsing history.
• Supabase — our database and authentication provider, hosted in the EU.

Cookies

We use a single session cookie for anonymous tracking and authentication state. Google AdSense may set additional advertising cookies. You can opt out of personalised ads via Google Ad Settings.

Your rights

You may request deletion of your account and all associated data at any time. Registered users can delete their account from the settings page. Anonymous session data is automatically purged after 90 days of inactivity.

Contact

Questions about privacy or data deletion requests can be sent to the contact address listed on our GitHub repository.