Privacy Policy

1. Information We Collect

When you create an account we collect your email address, display name, and profile picture. When you make a purchase we collect payment information processed securely through Stripe — we never store your full card number. We also collect basic usage data (pages visited, features used) to improve the platform.

2. How We Use Your Information

We use your information to operate and improve Crate, process transactions, communicate important updates, and provide customer support. We do not sell your personal data to third parties.

3. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use encryption in transit (TLS) and at rest. Access to production data is restricted to authorized personnel only.

4. Cookies & Analytics

We use essential cookies to keep you signed in and remember your preferences (e.g. theme). We may use privacy-friendly analytics to understand aggregate usage patterns. We do not use invasive tracking or sell data to advertisers.

5. Third-Party Services

We integrate with the following third-party services: Stripe for payments, Supabase for authentication and database, and cloud storage providers for asset delivery. Each operates under their own privacy policy.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@crate.as. We will respond within 30 days.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of Crate after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this privacy policy, please email us at support@crate.as.