This policy describes the current CrateSeek app and the crateseek.app website, which uses Google Analytics only if you allow it (section 4). Discovery and playback are unlimited without an account. Sign in with Apple is optional for syncing likes and required for account-backed Crates. CrateSeek does not sell personal information and does not ask for App Tracking Transparency permission. Where offered, ads on the Free plan come from Google AdMob — a banner on the record screen — as described in section 4.
1. Who we are
CrateSeek is a music-discovery app for producers, run by XHJ Digital, a sole proprietorship (eenmanszaak) registered with the Netherlands Chamber of Commerce (KvK) under number 42163248, located at Nassaulaan 28a, 9717 CK Groningen, the Netherlands. We are the controller for the personal information described in this policy. You can reach us about privacy at xhjdigital@gmail.com.
Most preferences and library activity stay on your device. We process a small amount of pseudonymous information to operate the catalog, understand whether core features work, provide weekly picks and receive private feedback.
2. Information we process
Stored on your device: onboarding status, filter and playback preferences, which record details you want to see, a cache of saved tracks, listening history, IDs of tracks already shown, quick skips and longer listens used to tune For You, a random installation ID, a short queue of analytics events waiting to be sent, legacy discovery-usage data from earlier builds, and an encrypted Supabase session when you sign in. When ads are offered, Google’s consent tool also stores your ad privacy choices on the device.
Sent to CrateSeek: an email address you submit to the website waitlist; your Apple account identifier, relay or shared email address, and name when Apple provides it and you sign in; saved recording IDs; Pro access status; the names of Crates you create and which saved recording IDs you place in them; notes you write on records; the genres and styles you pick when setting up CrateSeek Pro; random installation and session IDs; limited product events; relevant recording or playback-source IDs; timestamps; app and platform details; sanitized crash frames; private feedback text you deliberately submit. Session Replay is disabled in the launch app; it does not record screen structure or interaction replays.
Weekly picks and private feedback, linked to your random installation ID: the recording IDs you like count towards the Track of the Week chart. Feedback messages include the text you submit, your random installation ID, app version and platform. They are kept in a private inbox for the CrateSeek team; other app users cannot read or vote on them. The launch app has no public ideas board.
Crash events do not include the error message, source-code context, screen contents, URL query parameters, local user paths or user-entered text. We do not intentionally collect precise location, contacts, microphone recordings or music files.
Technical request data: hosting and infrastructure providers may receive standard network information such as IP address, user agent and request time. CrateSeek uses one-way hashed, short-lived request buckets for abuse prevention and does not store raw IP addresses in its application database.
3. How we use information and on what basis
- Provide playable catalog results, remember tracks already shown and tune For You.
- Link Pro access to your account and validate purchases.
- Sync saved tracks, notes and Crates across devices signed in to the same account; history and most preferences stay on the device.
- Show the Track of the Week.
- Notify waitlist members when CrateSeek becomes available.
- Measure whether onboarding, playback, discovery and saving work reliably.
- Understand how visitors find and use the website, if they allow it.
- Prevent spam, bots and excessive requests.
- Read private feedback and bug reports you choose to submit to improve CrateSeek.
- Where enabled, show a banner advertisement on the Free plan.
- Deliver app updates and protect CrateSeek, and comply with legal obligations such as tax and accounting rules.
Under the EU and UK General Data Protection Regulation (GDPR/AVG), processing needed to deliver the features and subscription you ask for is based on the performance of our agreement with you (Article 6(1)(b)). Reliability analytics, weekly picks, private feedback, app updates and abuse prevention are based on our legitimate interest in operating, improving and securing CrateSeek (Article 6(1)(f)); you can object at any time. Keeping purchase records is based on legal obligations (Article 6(1)(c)). Where the law requires it, ad storage, measurement and personalization rely on the consent you give in Google’s consent message (Article 6(1)(a)), which you can withdraw at any time. Website analytics rely on the consent you give in the website’s cookie banner (Article 6(1)(a)), which you can withdraw at any time under Cookie settings.
4. Providers and external playback
CrateSeek uses Apple for optional account authentication; Formspark to receive and manage website waitlist submissions; Supabase (servers in Ireland, EU) for authentication, catalog data, weekly picks, private feedback and server-side functions; PostHog Cloud (EU servers) for privacy-minimal product analytics, error tracking; Expo (EAS Update) to deliver app updates, which receives app version, platform and standard network information when the app checks for an update; Cloudflare Workers, which serves this website and as a content delivery network receives standard network information such as IP address, user agent and request time; and YouTube’s permitted embedded player for playable previews. PostHog receives a small set of pseudonymous product events (such as app opens, onboarding progress, records viewed, played and saved, filters applied, Pro features tapped and paywall views), sanitized JavaScript crash frames, all linked to the random installation ID. The app sends them without person profiles, broad interaction autocapture, console capture, Session Replay or GeoIP enrichment. When purchases are available, RevenueCat also sends PostHog your subscription events (for example a trial start, purchase, renewal, cancellation or billing issue, with product, price and currency) and your current subscription status, linked to that same random installation ID, so we can see how the paywall performs; RevenueCat does not send your name, email or CrateSeek account ID to PostHog. CrateSeek does not host, extract or offer downloads of third-party music. When a YouTube player or external link is opened, Google/YouTube may receive device and network information under its own terms and privacy policy. Discogs and MusicBrainz provide catalog metadata; CrateSeek’s trusted catalog tools access them server-side or on the project owner’s machine.
Advertising data. Where ads are enabled, Free users may see a banner from Google AdMob; Pro members never see ads. To deliver and measure ads, prevent fraud and, where you allow it, personalize them, Google may process device and network information such as your IP address (which Google uses to estimate approximate location), device and app identifiers other than Apple’s advertising identifier, and ad interaction and diagnostic data. Because CrateSeek does not ask for App Tracking Transparency permission, Apple’s advertising identifier (IDFA) is not available to Google through CrateSeek. In the EEA, the UK, Switzerland and other places where consent is required, Google’s consent message asks for your choices before any ad is requested, and you can change them at any time under Profile → Privacy Choices. If you decline, CrateSeek keeps working and may show limited, non-personalized ads or none. CrateSeek does not receive your advertising identifiers. Google’s processing is governed by the Google Privacy Policy and how Google uses information from apps that use its services.
Banner advertisements. On the Free plan a banner from Google AdMob can appear below the record details on the discovery screen. The banner loads with the screen only when ads are enabled and the consent platform allows an ad request. It is never placed over the video player, and Pro members never see ads. The same Google processing described above applies — device and network information such as your IP address, app and device identifiers other than Apple’s advertising identifier, and ad interaction and diagnostic data. In the EEA, the UK, Switzerland and other places where consent is required, no banner is requested at all until Google’s consent message has your choices, which you can change at any time under Profile → Privacy Choices. If you decline, the banner is either non-personalized or absent, and CrateSeek keeps working either way. CrateSeek receives no ad identifiers and no ad choices from Google.
Purchases and CrateSeek Pro. Subscriptions are sold by Apple through the App Store (or by Google through Google Play) and processed with the help of RevenueCat, which CrateSeek uses to validate purchases, determine whether your account has Pro access, restore purchases and let you manage your subscription. Apple or Google handle your payment details; neither RevenueCat nor CrateSeek receives your card number. When purchases are available, RevenueCat receives a pseudonymous CrateSeek user identifier (the random ID of your CrateSeek account when you are signed in, otherwise a random ID created by RevenueCat), the random installation ID used for analytics, your purchase and subscription history such as product, price, currency, transaction and renewal or cancellation status, and standard device, app and network information such as device model, operating-system and app version, country or storefront and IP address. CrateSeek does not send RevenueCat your name or email address and does not use RevenueCat data for advertising. RevenueCat processes this data on CrateSeek’s behalf under the RevenueCat Privacy Policy.
We do not authorize current providers to use CrateSeek’s private waitlist or feature-request inbox for their own advertising. Their independent processing is governed by their own policies.
5. International transfers
Some providers are based in, or may process data in, the United States or other countries outside the European Economic Area: RevenueCat, Google (AdMob, YouTube and Analytics), Apple, Expo and Cloudflare. Where that happens, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses included in the provider’s data processing terms.
6. Retention and security
Device data remains until you clear the app’s data or remove the app. Account, daily discovery usage, saved tracks, notes, Pro setup and Crate records remain while your account exists and are permanently deleted when you delete your account. Track of the Week likes count towards the chart for the week they are made, stay linked only to your random installation ID, and are removed when you delete your account. The launch app does not publish feedback. Any Community ideas or votes from earlier builds remain subject to their existing retention; you can ask us to remove an idea you previously submitted. Waitlist emails remain until launch communication is complete, or you ask us to remove them. Session Replay is disabled in the launch app. Any recordings from earlier builds remain subject to the provider’s configured retention. Website analytics data in Google Analytics is kept for no longer than 14 months. Feature requests and pseudonymous analytics and crash events are retained only while reasonably useful for product planning, reliability, security and legal needs, after which they are deleted or aggregated. Purchase records are kept as long as needed for your subscription, refunds and disputes, and for as long as tax and accounting rules require. Security controls include encrypted transport, least-privilege database access, row-level security, input limits, rate limits and restricted server-side keys.
No system can guarantee absolute security. Please do not place confidential, legally privileged or highly sensitive information in a feature request.
7. Your choices and rights
You can discover and play records without Apple sign-in and remove local data by clearing app storage or uninstalling the app. Sign in is optional for syncing likes and required for account-backed Crates. You can permanently delete your account at any time in the app under Profile → Delete account; this removes your account, discovery usage, saved tracks, notes, Pro access status, Crates, Pro setup picks, your Track of the Week likes and the data CrateSeek stores on that device, gives the app a new installation ID, and revokes CrateSeek’s Sign in with Apple access. Deleting your account does not cancel an App Store subscription; manage that under Profile → Manage subscription or in your App Store settings.
Under the GDPR you have the right to access, correct, delete, restrict or port your personal information, to object to processing based on our legitimate interests, and to withdraw consent at any time without affecting earlier processing; for website analytics, use Cookie settings at the foot of any page. To use these rights, email xhjdigital@gmail.com; we respond within one month. Because most CrateSeek data is pseudonymous, we may ask for your installation ID or account details so we can find it; fully anonymous records cannot be linked to you. You also have the right to lodge a complaint with a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens; elsewhere you can contact the authority where you live or work.
8. Children
CrateSeek is not directed to children. In the European Economic Area you must be at least 16 to use CrateSeek, or have permission from a parent or guardian; elsewhere you must be at least 13. If you believe a child has provided personal information, contact us so it can be reviewed and removed.
9. Changes
We may update this policy when the app, providers or legal requirements change. The effective date at the top will be updated, and material changes will be communicated through the app or website where appropriate.
10. Contact
XHJ Digital · KvK 42163248 · Nassaulaan 28a, 9717 CK Groningen, the Netherlands
Email: xhjdigital@gmail.com
See the support page for help with your subscription, your account or playback. Feedback goes privately to the CrateSeek team. Please do not include passwords or sensitive information.