Privacy Policy

1. Who we are

CrateSeek is a music-discovery app for producers, run by XHJ Digital, a sole proprietorship (eenmanszaak) registered with the Netherlands Chamber of Commerce (KvK) under number 42163248, located at Nassaulaan 28a, 9717 CK Groningen, the Netherlands. We are the controller for the personal information described in this policy. You can reach us about privacy at xhjdigital@gmail.com.

Most preferences and library activity stay on your device. We process a small amount of pseudonymous information to operate the catalog, understand whether core features work, run the Community features and receive feature requests.

2. Information we process

Stored on your device: onboarding status, filter and playback preferences, which record details you want to see, saved tracks, listening history, IDs of tracks already shown, quick skips and longer listens used to tune For You, a random installation ID, a short queue of analytics events waiting to be sent, your progress through the current block of free discoveries, and an encrypted Supabase session when you sign in. When ads are offered, Google’s consent tool also stores your ad privacy choices on the device.

Sent to CrateSeek: an email address you submit to the website waitlist; your Apple account identifier, relay or shared email address, and name when Apple provides it and you choose to sign in; Beta and Pro access status; the names of Crates you create and which saved recording IDs you place in them; the genres and styles you pick when setting up CrateSeek Pro; random installation and session IDs; limited product events; relevant recording or playback-source IDs; timestamps; app and platform details; sanitized crash frames; feature-request text you deliberately submit; and anonymous Session Replay data showing screen structure and interactions. Replay masks all text, text inputs, images and system views before upload and does not capture console logs or network telemetry.

Community features, linked to your random installation ID (not your name or account): the recording IDs you like, which count towards the Track of the Week chart; the Community ideas you submit; and the ideas you vote for.

Crash events do not include the error message, source-code context, screen contents, URL query parameters, local user paths or user-entered text. We do not intentionally collect precise location, contacts, microphone recordings or music files.

Technical request data: hosting and infrastructure providers may receive standard network information such as IP address, user agent and request time. CrateSeek uses one-way hashed, short-lived request buckets for abuse prevention and does not store raw IP addresses in its application database.

3. How we use information and on what basis

• Provide playable catalog results, remember tracks already shown and tune For You.
• Link Beta and Pro access to your account and validate purchases.
• Maintain saved tracks, history, Crates, Pro setup picks and your preferences, and sync Crates across devices signed in to the same account.
• Show the Track of the Week and Community ideas.
• Notify waitlist members when CrateSeek becomes available and give them the Beta pass: when you sign in with Apple and share the same email address, we match it to the waitlist.
• Measure whether onboarding, playback, discovery and saving work reliably.
• Prevent spam, bots and excessive requests.
• Review feature ideas you choose to submit.
• Offer optional rewarded video ads that unlock more discoveries on the Free plan, and show a banner advertisement on the Free plan.
• Deliver app updates and protect CrateSeek, and comply with legal obligations such as tax and accounting rules.

Under the EU and UK General Data Protection Regulation (GDPR/AVG), processing needed to deliver the features and subscription you ask for is based on the performance of our agreement with you (Article 6(1)(b)). Reliability analytics, Community features, app updates and abuse prevention are based on our legitimate interest in operating, improving and securing CrateSeek (Article 6(1)(f)); you can object at any time. Keeping purchase records is based on legal obligations (Article 6(1)(c)). Where the law requires it, ad storage, measurement and personalization rely on the consent you give in Google’s consent message (Article 6(1)(a)), which you can withdraw at any time.

4. Providers and external playback

CrateSeek uses Apple for optional account authentication; Supabase (servers in Ireland, EU) for authentication, the waitlist, catalog data, Community features and server-side functions; PostHog Cloud (EU servers) for privacy-minimal product analytics, error tracking and masked Session Replay; Expo (EAS Update) to deliver app updates, which receives app version, platform and standard network information when the app checks for an update; Cloudflare Workers, which serves this website and as a content delivery network receives standard network information such as IP address, user agent and request time; and YouTube’s permitted embedded player for playable previews. PostHog receives a small set of pseudonymous product events (such as app opens, onboarding progress, records viewed, played and saved, filters applied, Pro features tapped and paywall views), sanitized JavaScript crash frames and masked interaction replays, all linked to the random installation ID. The app sends them without person profiles, broad interaction autocapture, console capture, replay network telemetry or GeoIP enrichment. When purchases are available, RevenueCat also sends PostHog your subscription events (for example a trial start, purchase, renewal, cancellation or billing issue, with product, price and currency) and your current subscription status, linked to that same random installation ID, so we can see how the paywall performs; RevenueCat does not send your name, email or CrateSeek account ID to PostHog. CrateSeek does not host, extract or offer downloads of third-party music. When a YouTube player or external link is opened, Google/YouTube may receive device and network information under its own terms and privacy policy. Discogs and MusicBrainz provide catalog metadata; CrateSeek’s trusted catalog tools access them server-side or on the project owner’s machine.

Optional rewarded video ads. When ads are switched on, Free users can choose to watch a short video from Google AdMob to unlock more discoveries. A video only plays after you tap to unlock; Pro and Beta members never see ads. To deliver and measure ads, prevent fraud and, where you allow it, personalize them, Google may process device and network information such as your IP address (which Google uses to estimate approximate location), device and app identifiers other than Apple’s advertising identifier, and ad interaction and diagnostic data. Because CrateSeek does not ask for App Tracking Transparency permission, Apple’s advertising identifier (IDFA) is not available to Google through CrateSeek. In the EEA, the UK, Switzerland and other places where consent is required, Google’s consent message asks for your choices before any ad is requested, and you can change them at any time under Profile → Privacy Choices. If you decline, CrateSeek keeps working and may show limited, non-personalized ads or none. CrateSeek itself only records pseudonymous events about unlock attempts (for example, whether a video was completed), linked to the random installation ID, and never receives your ad choices or advertising identifiers. Google’s processing is governed by the Google Privacy Policy and how Google uses information from apps that use its services.

Banner advertisements. On the Free plan a banner from Google AdMob can appear below the record details on the discovery screen. Unlike the rewarded video it is not something you start: it loads with the screen. It is never placed over the video player, and Pro and Beta members never see ads. The same Google processing described above applies — device and network information such as your IP address, app and device identifiers other than Apple’s advertising identifier, and ad interaction and diagnostic data. In the EEA, the UK, Switzerland and other places where consent is required, no banner is requested at all until Google’s consent message has your choices, which you can change at any time under Profile → Privacy Choices. If you decline, the banner is either non-personalized or absent, and CrateSeek keeps working either way. CrateSeek receives no ad identifiers and no ad choices from Google.

Purchases and CrateSeek Pro. Subscriptions are sold by Apple through the App Store (or by Google through Google Play) and processed with the help of RevenueCat, which CrateSeek uses to validate purchases, determine whether your account has Pro access, restore purchases and let you manage your subscription. Apple or Google handle your payment details; neither RevenueCat nor CrateSeek receives your card number. When purchases are available, RevenueCat receives a pseudonymous CrateSeek user identifier (the random ID of your CrateSeek account when you are signed in, otherwise a random ID created by RevenueCat), the random installation ID used for analytics, your purchase and subscription history such as product, price, currency, transaction and renewal or cancellation status, and standard device, app and network information such as device model, operating-system and app version, country or storefront and IP address. CrateSeek does not send RevenueCat your name or email address and does not use RevenueCat data for advertising. RevenueCat processes this data on CrateSeek’s behalf under the RevenueCat Privacy Policy.

We do not authorize current providers to use CrateSeek’s private waitlist or feature-request inbox for their own advertising. Their independent processing is governed by their own policies.

5. International transfers

Some providers are based in, or may process data in, the United States or other countries outside the European Economic Area: RevenueCat, Google (AdMob and YouTube), Apple, Expo and Cloudflare. Where that happens, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses included in the provider’s data processing terms.

6. Retention and security

Device data remains until you clear the app’s data or remove the app. Account, Beta, Pro setup and Crate records remain while your account exists and are permanently deleted when you delete your account. Track of the Week likes count towards the chart for the week they are made, stay linked only to your random installation ID, and are removed when you delete your account. Community ideas and votes remain while the Community board is useful, and you can ask us to remove an idea you submitted. Waitlist emails remain until launch communication and the waitlist Beta pass are complete, or you ask us to remove them. Masked Session Replays are retained for 30 days. Feature requests and pseudonymous analytics and crash events are retained only while reasonably useful for product planning, reliability, security and legal needs, after which they are deleted or aggregated. Purchase records are kept as long as needed for your subscription, refunds and disputes, and for as long as tax and accounting rules require. Security controls include encrypted transport, least-privilege database access, row-level security, input limits, rate limits and restricted server-side keys.

No system can guarantee absolute security. Please do not place confidential, legally privileged or highly sensitive information in a feature request.

7. Your choices and rights

You can use CrateSeek without Apple sign-in during the beta and remove local CrateSeek data by clearing app storage or uninstalling the app. If you signed in, you can permanently delete your account at any time in the app under Profile → Delete account; this removes your account, Beta and Pro access status, Crates, Pro setup picks, your Track of the Week likes and the data CrateSeek stores on that device, gives the app a new installation ID, and revokes CrateSeek’s Sign in with Apple access. Deleting your account does not cancel an App Store subscription; manage that under Profile → Manage subscription or in your App Store settings.

Under the GDPR you have the right to access, correct, delete, restrict or port your personal information, to object to processing based on our legitimate interests, and to withdraw consent at any time without affecting earlier processing. To use these rights, email xhjdigital@gmail.com; we respond within one month. Because most CrateSeek data is pseudonymous, we may ask for your installation ID or account details so we can find it; fully anonymous records cannot be linked to you. You also have the right to lodge a complaint with a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens; elsewhere you can contact the authority where you live or work.

8. Children

CrateSeek is not directed to children. In the European Economic Area you must be at least 16 to use CrateSeek, or have permission from a parent or guardian; elsewhere you must be at least 13. If you believe a child has provided personal information, contact us so it can be reviewed and removed.

9. Changes

We may update this policy when the app, providers or legal requirements change. The effective date at the top will be updated, and material changes will be communicated through the app or website where appropriate.

10. Contact

XHJ Digital · KvK 42163248 · Nassaulaan 28a, 9717 CK Groningen, the Netherlands
Email: xhjdigital@gmail.com

See the support page for help with your subscription, your account or playback. Please do not include private information in a feature request, which other people can read.