Privacy Policy

What we collect

• Account. When you sign in, our auth provider (Clerk) gives us your email address and name — and, if you use Google sign-in, your Google display name. That's it.
• Your briefs and playlists. The playlist requests you type, and the playlists and write-ups generated from them, are stored so you can return to them.
• Last.fm (optional). If you connect Last.fm, we store your username and sync your public scrobble history to make playlists history-aware. Remove it any time.
• Basic usage. Minimal server logs and product analytics (which pages, how often) to run and improve the service.

How playlists are created

During the beta, playlists are created inside a shared Cratelore-owned Spotify account and are public by default, so anyone with the link can open them. We do not post to your personal Spotify account unless you explicitly connect it.

Who we share data with

We use a small set of processors to run the product:

• Clerk — authentication.
• Anthropic (Claude) — the AI agent that researches and assembles your playlist processes your brief.
• Spotify — playlist creation and playback.
• Last.fm — listening history, only if you connect it.
• Resend — transactional email.
• Cloudflare & Hetzner — DNS, CDN, and hosting.

Each processes data only to provide its function. We don't sell personal data or share it for advertising.

Cookies

We set only what's needed: a sign-in session cookie (Clerk) and a beta-access cookie set when you open a private invite link. No third-party advertising or cross-site tracking cookies.

Retention & your rights

We keep your account and playlists until you ask us to delete them. You can request access to, correction of, or deletion of your data — including disconnecting Last.fm and removing your synced history — by emailing us. We'll action deletion requests promptly.

Contact

Questions or requests: contact@cratelore.com.