Privacy Policy

1. Introduction

CrateDigger, operated by Korey Armstrong ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application and website.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Account creation date
• Subscription tier and status

Usage Data

We track feature usage to manage subscription limits and improve our service:

• Auto-tag usage count (monthly)
• Feature usage statistics (anonymized)
• Error reports (for debugging)

Audio File Information

When you use auto-tagging, we send an audio fingerprint (not the audio itself) to third-party services for track identification. Audio fingerprints are generated locally on your machine. These fingerprints are non-reversible mathematical signatures that cannot be reconstructed back into playable audio files. We do not store your audio files or their contents.

What We Do NOT Collect

• Your audio files
• File contents or actual music
• Your full library metadata
• Location data
• Device identifiers

3. How We Use Your Information

• To provide and maintain our service
• To manage your account and subscription
• To enforce usage limits (auto-tag quotas)
• To process payments through Polar.sh
• To send important account notifications
• To improve and optimize our application
• To respond to support requests
• To detect and prevent abuse
• To send periodic product updates or feature announcements (with the option to opt out)

4. Data Storage and Security

Your account data is stored securely using Supabase, which provides:

• Industry-standard encryption (TLS in transit, AES-256 at rest)
• Row-level security policies
• Regular security audits

Payment information is processed securely through Polar.sh. We never store your credit card details on our servers.

Your music library data remains entirely on your local device. CrateDigger processes files locally and only sends audio fingerprints for track identification.

Application logs, local settings, and cached analysis results are stored on your device. We do not automatically collect or transmit this data. Error reports are only sent if you explicitly choose to share them for troubleshooting purposes.

5. Third-Party Services

We use the following third-party services:

By using the Software, you acknowledge that these third-party services will process your data according to their own policies to the extent necessary to provide their specific service. Supabase receives your account information, ACRCloud receives only audio fingerprints, and Polar.sh receives only payment information.

6. Your Rights

You have the right to:

• Access - Request a copy of the personal data we hold about you
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your account and associated data
• Export - Export your data in a portable format
• Opt-out - Opt out of marketing communications

For California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell your personal information.

For EU/EEA Residents (GDPR): You have additional rights including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@cratedigger.pro. We will respond to all requests within 30 days.

7. Data Retention

We retain your account information for as long as your account is active.

• Account data: Retained until account deletion
• Usage statistics: Retained for 12 months (rolling)
• Payment records: Retained as required by law (typically 7 years)

If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Cookies and Tracking

Our website uses essential cookies for:

• Authentication state
• Session management

We do not use advertising cookies or third-party tracking services on our website. The desktop application does not use cookies.

9. Children's Privacy

CrateDigger is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your data may be processed in countries other than your own. By using CrateDigger, you consent to the transfer of your information to the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email or in-app notification.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: support@cratedigger.pro