Crate Crawl is a music discovery platform built for DJs. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it. We believe in plain language — no legal fog, no dark patterns. If anything in here is unclear, reach out and we will explain it.
When you create an account, we collect your email address and a display name of your choosing. Your password is handled entirely by Supabase authentication — it is hashed before it ever reaches storage, and we never have access to your plaintext password.
When you rate tracks, build crates, and dig for music on the platform, we store your ratings, crate configurations, genre preferences, and taste profile data. This is the core data that makes Crate Crawl work — without it, we cannot personalize your recommendations. This data is associated with your account and stored in our database.
If you use the Track Fixer feature, you upload audio files for format conversion and metadata correction. These files are stored temporarily on Cloudflare R2, our cloud object storage provider. Uploaded files are automatically and permanently deleted within 48 hours of the processed file becoming available for download. We do not retain your audio files longer than necessary to provide the service.
Payment processing is handled by Stripe. Crate Crawl never stores your card number, CVV, or full payment details. When you upgrade your subscription, Stripe handles all sensitive financial data and returns us only a customer identifier and subscription status. We store that identifier to manage your account tier.
We track basic usage counters — how many tracks you have discovered this week, how many crates you have created, and how many Track Fixer jobs you have run. This data is used to enforce your plan limits and reset at the appropriate billing interval.
We use your data to operate and improve Crate Crawl. Specifically:
Crate Crawl uses Supabase as its authentication provider and primary database. Your account data, crates, dig history, and ratings are stored in Supabase infrastructure. Supabase is SOC 2 compliant and stores data in AWS data centers. You can review Supabase's own privacy practices at supabase.com/privacy.
Audio files uploaded to Track Fixer are stored in Cloudflare R2 object storage. Files are stored only as long as needed — they are automatically deleted within 48 hours after the processed output is ready for download. Cloudflare does not process your audio files; they are only stored in transit for the conversion workflow.
Subscription billing is processed by Stripe, a PCI-DSS Level 1 certified payment processor. When you enter payment details on checkout, those details go directly to Stripe's servers — Crate Crawl servers never touch your raw card data. We receive a Stripe customer ID and subscription object, which we store to keep your account tier in sync.
We do not sell, rent, or share your personal data with third parties for marketing, advertising, or data broker purposes. Full stop. The business model is subscriptions, not surveillance. Your music taste is yours.
You have the right to access, correct, and delete the personal data we hold about you. Specifically, you can:
To exercise any of these rights, contact us at privacy@cratecrawl.com. We will respond within 30 days.
We retain your account data for as long as your account is active. Audio files uploaded to Track Fixer are deleted within 48 hours of download availability. If you delete your account, we delete your personal data within 30 days, except where retention is required by applicable law (such as financial records).
We take reasonable technical and organizational measures to protect your data. Passwords are hashed by Supabase using industry-standard algorithms. Data in transit is encrypted via HTTPS. Audio files in Cloudflare R2 are stored with encryption at rest. That said, no system is perfectly secure. If you discover a security issue, please report it to privacy@cratecrawl.com and we will respond promptly.
We may update this privacy policy as the product evolves. When we make material changes, we will notify you via email or a prominent notice in the app. The “last updated” date at the top of this page will always reflect the current version. Continued use of Crate Crawl after changes are posted constitutes your acceptance of the updated policy.
Questions, concerns, or requests related to your privacy can be directed to: privacy@cratecrawl.com