Privacy Policy
Last updated: November 7, 2026
This policy explains what DropCrate ("we", "us") does with information when you use DropCrate at https://dropcrate.org. The short version: DropCrate works in your browser, and your playlists and music files stay on your device.
What stays on your device
- Playlists you paste or import. They are read and processed in your browser. We do not upload or store them. A copy of the playlist, and which tracks you have opened or marked as bought, is kept in your browser's local storage so your shopping list is still there next time.
- Music files you add. They are read, renamed and re-tagged in your browser, and the results are saved to your computer. We do not upload them.
- Your settings. Your chosen naming style, custom pattern, tag and cover art preferences and monthly file count are saved in your browser's local storage so they are remembered next time. You can clear them any time by clearing site data.
Optional cover art lookup
If you turn on "Save cover art as an image", DropCrate may look up cover art for tracks that don't already have a cover image in your download folder. To do this, your browser sends the artist, album or track title, and (if your playlist includes one) the track's ISRC code to MusicBrainz (musicbrainz.org) and then requests the image from the Cover Art Archive (coverartarchive.org). If your playlist data includes a link to cover art, your browser may also fetch that image from the address in your playlist. These requests go from your browser directly to those services, not through us, so they will see your IP address and are covered by their own privacy policies. Your music files are never sent. This feature is off unless you turn it on, and you can turn it off at any time.
Links to other sites
The buy list and the "Copy links" button use search pages on Beatport, which open in a new tab. Those sites are run by other companies with their own privacy policies. We do not share your playlist with them; only the artist and title you click on are included in the link. We are not affiliated with them. We never see or handle your payment details or store logins.
Information our hosting provider collects
Our site is hosted by Cloudflare. Like most web hosts, it may log technical data such as IP address, browser type and the pages requested, for security and reliability. We do not use analytics on this site.
Accounts and payments
If you create an account, we collect your email address so you can sign in with a one-time code. Our sign-in provider (Supabase) stores that email and a record of your plan (Free or Pro, its status and renewal date). Paid plans are sold by Paddle, which acts as the seller (merchant of record): Paddle collects and processes your card and billing details and sends us your plan status; we never see or store your card number. We keep your account record while your account exists and billing records as long as tax law requires. Your music files and their tags are never uploaded; renaming, tag fixing and zipping all happen in your browser. On a paid plan only, we also save your playlist text (artists and titles), which tracks you have marked as bought, your naming pattern and your option choices to your account so they follow you between devices; you can stop this by signing out, and we delete it if you ask us to delete your account. [Retention periods and contact address to be confirmed by your legal reviewer.]
Cookies
DropCrate [does not use cookies / uses only the following cookies: ...]. It uses browser local storage for the settings described above.
Sharing
We do not sell your personal information. We share information only with service providers that help us run the site (for example hosting and, once launched, payments), or when the law requires it.
Your choices and rights
Depending on where you live, you may have rights to access, correct or delete personal information we hold about you. [Add region-specific wording, for example GDPR and CCPA, as applicable.] To make a request, contact us at [email protected].
Children
DropCrate is not directed at children under [13/16], and we do not knowingly collect their information.
Changes
If we change this policy we will update the date above and, for significant changes, tell you on the site.
Contact
DropCrate, P.O. Box 5023, Reno, NV 89503, USA. Email: [email protected].