Privacy Policy

What we collect

CrateDrop collects only what it needs to run. If you create an account, we store your email address and a hashed identifier from your OAuth provider. If you use the app without an account, we store only an anonymous session cookie to keep your listening history for that session. No payment data is collected. The service is free.

How we use it

Your email is used for authentication only (magic link sign-in). Discovery history is stored to power the “previous track” feature. Audio analysis results are cached globally so all users get a faster experience. Your listening does not create a personal audio profile and is not shared or sold.

Third-party services

• Discogs — music metadata and release data. Subject to Discogs privacy policy.
• YouTube — embedded video playback. Google may collect data through embedded players per their privacy policy.
• Google AdSense — advertising. Google may use cookies to serve relevant ads based on your browsing history.
• Supabase — our database and authentication provider, hosted in the EU.

Cookies

We use a single session cookie for anonymous tracking and authentication state. Google AdSense may set additional advertising cookies. You can opt out of personalised ads via Google Ad Settings.

Your rights

You can request deletion of your account and all associated data at any time. Registered users can delete from the settings page. Anonymous session data is purged automatically after 90 days of inactivity.

Contact

Privacy questions and data deletion requests go to the contact address on our GitHub repository.