Privacy

What Crate keeps

Your sign-in email. Clerk handles sign-in.

The liked songs you import, and the playlists you import from Spotify.

Your settings, such as country, city and rules.

Your Discogs username, and any Discogs collection or wantlist you import.

Records you mark as owned.

Saved checks and your shortlist.

Personal API tokens you create.

If you connect Spotify, the connection to your Spotify account.

Why Crate keeps it

To build your Library, find pressings and prices, and show your stats. Nothing is sold.

Who else handles it

Clerk handles sign-in.

PostHog records how the site is used: the pages you visit, your clicks, errors, speed, and some session recordings. PostHog sets no cookies. When you are signed in, these visits are linked to your Crate account ID. PostHog says it removes personal details from logs when it receives them.

Railway, our hosting provider, runs Crate.

Music and shop sources only get artist and album names.

Spotify and Discogs are contacted with your own account only after you connect them.

Your data is handled outside Quebec, mainly in the United States. Clerk and PostHog's US cloud are in the United States.

How long it is kept

Your account data stays until you delete it.

Deleting your account removes your Crate account, your sign-in account and all saved Crate data. It also ends any Spotify connection. Analytics events already sent to PostHog are not deleted by this step.

Your choices

On the Account page, you can download a copy of your Crate data or delete your account.