Privacy policy

Draft for review before launch. Not yet legal advice.

Who we are

ID Crate is operated from the United Kingdom. Contact: hello@idcrate.co.uk. We are the data controller for the personal data described here.

What we collect

• Account data: your email address, an optional display name, a password hash if you set one, and sign-in tokens.
• Things you add: tracked IDs and their context, monitors, links you paste for detection, playlists, your shopping list, community suggestions and votes.
• Public hunts: finished scans are shown on the public ID wall at idcrate.co.uk/ids by default, as the link you pasted, the post's caption and metadata, the detection results and community suggestions. Your email and account are never shown; suggestions carry your display name. Turn sharing off in Settings, or take down a single scan from its card.
• Library metadata: when you index a folder, the tags read from your files (artist, title, album, BPM, key, genre, year, duration, format, file size and folder path). The audio itself is never uploaded.
• Spotify data when you connect it: your Spotify user id, playlists, liked songs, top tracks and recent plays, held so we can compare and export. Disconnect at any time from Settings.
• Usage records: which scans, playlists and conversions you run and an estimated cost of each, used for billing and to keep the service viable.
• Technical data: IP address for rate limiting and abuse prevention, and server logs kept for a short period.

How detection uses third parties

When you paste a link, the media is downloaded to a temporary directory, audio samples are sent to recognition services (Shazam via RapidAPI, AudD, ACRCloud and AcoustID), video frames and caption text are sent to Anthropic's Claude models, and results are verified against Spotify and Apple Music. Temporary files are deleted after the scan. A compact audio fingerprint of unidentified clips is kept so the same unknown track can be recognised across scans.

Email

We send sign-in links, verification emails, notifications you have turned on and a weekly digest through Resend. Notification emails can be turned off in Settings.

Payments

Subscriptions and credit top-ups are processed by Stripe. We never see or store your card details. Stripe's own privacy policy applies to payment data.

Analytics

This website uses a cookieless analytics service that records page views without identifying you. The app records product events against your account so we can improve it.

Your rights

You can export your crate at any time, delete your account from Settings, and ask us for a copy or deletion of your data by email. We respond within one month.

Retention

Account data is kept while your account exists and deleted within 30 days of account deletion, except billing records we are required to keep.