1. Who we are
Cratemint is built and run by its founder in the United Kingdom, who is the data controller for everything described here. The registered legal entity and its address are being confirmed with our solicitor and will be named here before the app goes on sale.
Contact us at cratemint.com/contact. Ask us for a postal address and you will get one.
We are completing our registration with the UK Information Commissioner's Office.
2. Your account
You can use Cratemint without an account. Records land on your shelf with no sign-up and no network. From your first record the app quietly backs your collection up to the cloud under an anonymous account, so nothing is ever lost before you sign in.
When you do sign in, with Apple or with Google, we receive your name and email address and link them to the collection you already have. Sign in with Apple can give us a private relay address instead of your real one, and that works fine. Basis: providing the service you asked for.
3. Your collection
For each record you own we keep what you tell us: which pressing it is, its condition, where and when you got it, what you paid, your story notes, and how you added it. We keep your listening log, your wantlist, and your crates. We use all of it to give you your collection, your stats, and your ritual, and for nothing else. Basis: providing the service.
We also note how each add went: the method, whether we matched it, and how long it took. No content, just plumbing, so scanning and matching get better. Those notes are deleted within twelve months.
We also record how you use the app: which screens and actions you reached, and when. Those events carry no content from your collection, no record titles, no notes, no prices, no photos, and no free text you typed, only the name of the thing that happened. And when the app crashes, iOS hands us a summary afterwards with your app version, your iOS version, and your device model, so we can tell whether the fix worked. There is no third-party analytics or crash service involved, none of it is used for advertising or to follow you across other apps, and all of it goes when your account does. We delete it after twelve months either way.
You can turn all of that off. Settings, App, "Share usage and crash reports". Switch it off and the app stops recording, and anything it had already recorded and not yet sent is deleted from your phone rather than sent later. It covers the crash summaries too, because a switch that kept sending those would not be the switch it says it is. Everything else in the app works exactly the same.
When you search our catalogue for a record, the words you type go to our own lookup and come back with matches. We keep no search history against you.
4. What you paid, and what it is worth
What you paid for a record is private. It is stored on your own copy of that record and is never shown to another collector, not even when you publish a crate. The same is true of any insurance value you enter yourself.
Cratemint can also show a caveated range of what a pressing is currently listed for elsewhere. To do that we send a barcode, and only a barcode, to eBay's public listing search, and we cache the answer against the pressing in our own catalogue. Nothing about you goes with it. eBay cannot tell that anyone owns anything.
5. Scanning and your camera
When you scan a barcode, your iPhone reads it on the device. The camera image never reaches our servers. We use the barcode to find the record in our catalogue, and that is all. The same is true when you point the camera at a sleeve to recognise it: the recognition happens on your phone.
6. Crate mode and location
Crate mode tells you, in a record shop, whether you already own a record or have it on your wantlist. It works out that you are out crate-digging from a signal on your device alone. Cratemint asks for no location permission, reads no GPS position, reads no Wi-Fi network name, and stores nothing about where you have been. There is nothing about your location on our servers.
7. Photos and notes you add
Photos of your sleeves and records, your profile picture, and the notes you write are stored in your account and kept until you delete them or the account. Sometimes a photo of a record catches something in the background; we only ever use your photos to show your collection back to you, to render the share cards you ask for, and, if you list a record for sale, to show that listing to buyers.
8. Importing your Discogs collection
You export your own collection from Discogs as a CSV file, and Cratemint reads that file on your iPhone to build your shelf. It is your own data about your own records. We do not connect to your Discogs account and we do not call the Discogs service on your behalf. Records we cannot match become ghost entries you can tidy up later, so nothing is ever lost.
9. Notifications
If you allow notifications, we store a token for your device so we can tell you when a record on your wantlist turns up at a price you set, when a milestone lands, or when something happens on an order. Tokens are deleted when they stop working, after twelve months of inactivity, or with your account. Delivery goes through Apple's push notification service.
10. What is public, and only when you make it public
Your shelf starts private and stays private until you decide otherwise. Nothing in this section happens by default.
If you claim a handle, your profile becomes a public page at cratemint.com/@yourhandle showing your handle, display name, profile picture, and any crates you have published. If you switch on public milestones, your record and spin counts appear there too.
If you publish a crate or your shelf, it becomes a public page at cratemint.com/crate/id, showing the records in it. Anyone with the link can open it, and search engines can find it. Your purchase prices, your values, your story notes, and your listening log are never part of a published crate.
If you follow another collector, that connection is visible to them. If you block someone, that is private to you.
You can unpublish a crate, change your handle, or switch milestones back off at any time, and the public page goes with it.
11. Buying and selling
The Cratemint marketplace is not open to the public yet. Today it runs only for a small group of beta sellers testing it through TestFlight. This section describes what happens when you buy or sell, so it is here before you need it rather than after.
If you sell
Listing a record puts its pressing, grades, price, photos, and description on the marketplace under your public handle. To get paid you open a Stripe Express account through Cratemint. Stripe collects your identity details and bank details directly, as the law requires of a payments business, and holds them under its own privacy policy. Cratemint never sees or stores your bank details. What we store is a reference to your Stripe account, your country and currency, your postage settings, and your return policy.
If you buy
At checkout you give a delivery address. Your card details go straight to Stripe and never touch our servers. Your name and delivery address are given to the seller, because a person has to put your record in the post. That is the one place Cratemint hands your personal data to another user, and it happens only for an order you placed.
Messages and reviews
Buyers and sellers can message each other about an order; we can read those messages when a dispute is raised, and only then. A review you publish stays published, with your link to it removed if you later delete your account, because a trust signal either party could erase is worth nothing.
Records of a sale
A completed order is a financial record. We keep it for as long as tax law requires, even if you delete your account. When you delete, we detach the personal parts: your delivery address is removed and the order stops pointing at you.
If you bring in help
A seller can give a colleague access to their store, with only the permissions they choose. To invite someone we store the email address the seller types, along with who invited them and what they were allowed to do. If the invite is never accepted we delete the address. If you have been invited, the only thing we hold about you until you accept is that email address and the invitation itself.
If you connect a Shopify store
Sellers who already run a Shopify shop can connect it so their inventory becomes listings. We store the connection and its credentials, and we read the products and stock levels of that shop. You can disconnect it at any time, which revokes our access.
If you connect a Square account
Sellers who run their shop on Square can connect it the same way, so their catalogue and stock become listings. We store the connection and the tokens Square gives us, and we read the items and stock levels of that account with read-only permissions. We never write anything back to Square. You can disconnect at any time, which revokes our access.
12. Feedback, reports, and safety
If you send feedback or report a catalogue error, we receive your message, your app version and build, your iOS version, and your device model, which are triage hints. We include your email address only if you switch on "OK to email me back". Those go into our own database and are mirrored to our internal triage board, which runs on Notion, so we can actually work through them. We use them to fix problems and nothing else.
If you report another collector's profile, crate, listing, or message, we keep the report, what you said, and how we resolved it. Reports are kept as a safety record even if the reported account is deleted, because otherwise anyone could erase the evidence by closing their account.
13. Who processes your data
A small set of providers process this data on our instructions and for no other purpose.
- Supabase stores and syncs your collection, photos, profile, listings, and orders. Hosted in the UK and EU.
- Vercel runs this website, the public profile and crate pages, and the share-card renders. It also gives us cookieless site analytics, which use no persistent identifiers, do not follow you across sites, and tell us only aggregated page views and general device, browser, and country information.
- Apple handles Sign in with Apple and push notification delivery.
- Google handles Google Sign-In when you choose it, and staff sign-in to our internal operator console.
- Stripe takes payments, runs seller onboarding and payouts, and holds seller identity and bank details as its own controller.
- Notion hosts the internal board your feedback and reports are mirrored to.
- Shopify is involved only if a seller connects their own shop.
- Square is involved only if a seller connects their own Square account.
- eBay receives a barcode when we look up what a pressing is listed for. No personal data goes to eBay.
- Resend sends the confirmation email when you message us through our contact form. It receives the address you gave us and your reference, never what you wrote.
- Anthropic reads your record photographs when you ask us to help grade a record. It receives those photographs and nothing else: not your name, not your email address, not your collection, and never anybody else's photographs. It sends back answers to the grading questions and a description of what it saw, which you are free to change. This only happens when you start a guided grading and you are signed in; you can always grade a record yourself instead.
Stripe, Notion, Shopify, Square, Resend, Anthropic, and Google process some data outside the UK under standard contractual safeguards. Each provider is bound by a data processing agreement.
Our record data is our own copy of open data: the Discogs and MusicBrainz data releases, both published under CC0, with cover art from the Cover Art Archive. We copy that open data and never send your personal data to any of those sources. If you send us a correction to a pressing, that factual correction becomes part of the shared catalogue, and you can see your own contributions in your export.
We never sell your data, we run no advertising, and we use no tracking SDKs.
14. This website
While Cratemint is still coming to the App Store, this site has a waitlist. If you join it we store the email address you type, which platform you are on, the campaign tag on the link you arrived by, and the page that sent you here, and we use them for exactly one thing: to email you the day the app lands. We keep them until you ask off the list, and we delete addresses that have not signed up in the app within six months of launch. Unsubscribing removes yours right away. Basis: the consent you gave when you joined.
Our hosting provider keeps standard server logs, including IP address and request time, to run and secure the site, as every host does.
15. How long we keep things
Your collection, photos, spins, wants, crates, and profile: as long as you keep your account. Add plumbing: twelve months. Feedback and catalogue reports: while we work the issue, then deleted with your account. Abuse reports and their resolution: kept as a safety record. Orders: kept as long as tax law requires, with the personal parts detached when you delete your account. Waitlist emails: deleted on request, and non-converting addresses within six months of launch. We store nothing about your location at all. The full schedule is available on request at cratemint.com/contact.
16. Your rights
You can ask what we hold about you, have it corrected, have it deleted, restrict or object to processing, and take your data elsewhere.
The fastest route is in the app. Settings, Export my collection gives you your collection as JSON and CSV: every record, what you paid, your notes, your wantlist, and your crates. It does not yet include your listening log, your photos, or your buying and selling history. Ask us and we will send you those too, and we are building them into the export itself. Settings, Delete account permanently removes your profile, collection, prices, photos, spins, wants, crates, listings, messages, and any waitlist signup under the same address, and it takes it off the device at the same time. It is a real deletion path we test automatically, not a support ticket.
If you have an open order or an unresolved dispute, deletion waits until it is finished, because the other person is owed the record or the money. We will tell you if that is the case.
Anywhere else, use cratemint.com/contact and choose "Privacy and my data". A person replies within one month, usually much sooner. Where processing rests on consent, you can withdraw it at any time.
17. Children
Cratemint is for collectors aged sixteen and over. We do not knowingly collect data from anyone younger. If you believe we have, tell us at cratemint.com/contact and we will delete it.
18. Changes, contact, and complaints
If we change what we collect or why, we update this notice and tell you in the app before the change applies to you. The date at the bottom changes with it.
Questions, requests, or complaints: cratemint.com/contact. The form stores your message and emails you a reference so you can follow it up. If you are in the UK or EU you also have the right to complain to your data protection authority, in the UK the Information Commissioner's Office at ico.org.uk, though we would much rather fix it first.
Effective 29 July 2026