Privacy

Last updated: 8 July 2026

Crate is a small, independent project for sharing albums. Here’s what data Crate holds about you, why, and what you can do about it.

Who runs it. Crate (crate.fyi) is run by one person, Jamie, as a personal project, not a company. For anything data-related, email codrjc@gmail.com. Under UK data-protection law that makes me the “data controller” for your information.

What Crate collects

Only what it needs to work:

  • Your email address: so you can sign in (magic link or Google) and so I can send you the occasional account email.
  • Your profile: the username and avatar image you choose.
  • What you make on Crate: the crates you create, the albums you add, and your reviews.

That’s it. Crate does not collect analytics, does not use advertising or tracking cookies, does not build a profile of you to sell, and does not track you around the web. Your login session is kept in your browser’s own storage, not in a tracking cookie.

About Spotify

Crate shows album art, titles, and track listings from Spotify. It pulls this as public catalogue information using an app-level key. It does not connect to your personal Spotify account, and Spotify is not told who you are or what you look at.

Who else touches your data

To run Crate I rely on a few trusted services, each handling only what’s needed:

  • Supabase: stores the database, sign-in, and avatar images.
  • Vercel: hosts the site (and, like any web host, briefly processes technical data such as your IP address to deliver pages and keep things secure).
  • Resend: delivers account emails.
  • Google: only if you choose “Continue with Google,” to confirm your email.

I don’t sell your data or share it with anyone else.

How long it’s kept

Your data stays while your account is active. Ask me to delete it and it’s gone (see below).

Your rights

You can ask me to:

  • show you what data Crate holds about you,
  • correct anything that’s wrong,
  • delete your account and everything tied to it.

For any of these, email codrjc@gmail.com and I’ll sort it out. (A self-serve “download and delete my data” screen is planned; for now it’s a quick email to me.)

If you’re ever unhappy with how your data is handled, you can complain to the UK’s Information Commissioner’s Office (ico.org.uk).

Changes

If this policy changes, I’ll update the date at the top.