Legal

Your privacy

Last updated 27 September 2026

Who we are

CratePrep is operated by me personally from the Philippines. In this notice, “we” and “us” refer to CratePrep. I am responsible for the personal information described on this page.

This notice explains what we collect, why, and what you can do about it. It applies to the website, the browser editor, and emails we send you about the service.

Your music stays yours

This is the part most people want answered first, so it comes first.

Your audio and edits. CratePrep is a browser-based editor, not a desktop app. When you create an edit, the audio track you select is uploaded to our server for processing and the resulting edit is returned to your browser. Do not upload music unless you have the rights to process it.

Audio separation for the browser editor runs on our server. The track you select is sent to the server for processing and the resulting edit is returned to your browser.

Uploaded audio is processed in a temporary workspace and is intended to be removed when processing finishes. We do not use uploaded audio to train AI models. Technical logs may record request metadata; see the sections below for details about server logs and retention.

Your source audio must leave your device for server-side processing. You can choose not to upload a track if you do not want it processed by the service.

CratePrep does not silently scan your entire DJ library. When you choose or import a track or library source, the information needed for that feature may be processed by your browser or our service. The editor does not write changes back to your original music files.

In addition to audio you choose to process, your account and service usage data are handled as described below.

What we collect

Your account. Your email address, a securely hashed password, and the DJ name you choose when you sign up. The DJ name is also written into the edits you make — into the filename and the title tag — so it appears on your own files. If you answer the optional "Where did you hear about us?" question when you sign up, we keep that answer with your account, to tell which of our adverts and posts bring people to CratePrep.
Edit allowance. The service records saved edits to enforce the monthly allowance. The browser editor may use a random identifier stored in local storage to count free edits per browser as well as per account. This identifier is not intended to be a fingerprint and is not used for unrelated purposes.
Your subscription status. Whether you are on CratePrep Pro and when it renews.
Payments. If you subscribe, Stripe handles your card details directly. We never see or store your card number. We keep a record of what you bought and when.
Basic app diagnostics. When you last signed in, and which version of the app you are running, so we can support you when something goes wrong.
Website analytics. Pages visited, approximate location from your IP address, device and browser — only if you have accepted analytics. See the cookies section.
Server logs. Every request to this website is recorded by our server: the page asked for, the time, whether it worked, the address you came from, your browser, and a shortened version of your IP address with the final part removed so it identifies a network rather than a household. This is how we tell that the site is up and find out when something is broken. Unlike the analytics below, it is not optional and does not depend on your cookie choice — it is the server writing down what it did. We keep it for no longer than 30 days.
Advertising measurement. When you create an account, ask us to email you the download link, make an edit, or start a subscription, our server tells Meta (Facebook and Instagram) that it happened, with your email address and account ID in hashed form, so we can tell whether our adverts lead to people using CratePrep. Meta uses the hashed values only to match the event to an advert; it does not receive your password, your music or your edits.
How you found us. If you arrive through one of our own tracked links or adverts, we record which link it was, so we can tell which of our marketing is worth continuing. This is tied to your visit to our site, not to your browsing anywhere else.

Why we use it, and on what basis

To give you the product you asked for. Creating your account, signing you in, applying the free allowance or your Pro subscription, taking payment and providing support. Our basis is performance of a contract with you.

To keep the product working and fair. Diagnosing faults, keeping the website up, preventing abuse, and enforcing the free monthly allowance. Our basis is our legitimate interest in running the product and in the free tier meaning the same thing for everyone.

To tell you about our own products. See the next section.

To meet our legal obligations, such as keeping records of sales for tax purposes.

Marketing emails

If you sign up for CratePrep, we may send service-related messages. We will send marketing emails only where permitted by applicable law and based on the consent or other lawful basis explained when you sign up.

Unsubscribing from marketing does not stop the emails we have to send you about your account, your subscription, or a password reset.

We do not sell your email address, and we do not share it with anyone for their own marketing.

We use a small number of service providers who process personal information on our behalf, under contract and only on our instructions:

Supabase — stores your account, your DJ name, your subscription status and your edit count.
Stripe — takes payments and handles your card details directly.
DigitalOcean — hosts this website.
Better Stack — stores our server logs and tells us when the site goes down.
Sentry — records the technical detail of an error so we can fix it.
Google — Analytics, Tag Manager, Search Console and Ads, where you have accepted the relevant category.
Meta — advertising measurement, where you have accepted advertising cookies.
Click — our own link and visit tracker, self-hosted by us, not a third party.

Some service providers may process information outside the Philippines. Where applicable law requires safeguards for international transfers, we will use appropriate safeguards for those transfers.

We may also disclose information where we are legally required to, or to establish or defend legal claims.

Cookies and this website

Necessary technologies always run: one local-storage entry remembering your light or dark theme, and one remembering the cookie choice you made, so we stop asking. Neither is sent to us. If you use the web editor, two more keep you signed in and count your free edits per browser; those are sent to us, because that is what they are for.

Everything else runs only if you allow it. Analytics and advertising tags are held inert in the page and are not loaded at all until you grant the category they belong to. You can change your choice at any time from the cookie settings link in the footer.

With analytics allowed, we use Google Analytics to measure how the site is used, and our own self-hosted Click tracker to record page views against a first-party visitor id — so several page views can be recognised as one visit. If you arrived through one of our tracked links, we also keep that link's id, which tells us which post or video is worth continuing. It identifies the link, not you.

With advertising allowed, we measure whether an advert led to a download. Full detail of every technology, with what each one does, is in our cookies policy.

How long we keep it

We keep your account for as long as it is active. If you ask us to delete it, we will, other than records we are required to keep — sales records are kept for six years for tax purposes.

Edit records are kept while your account exists, because they are what the monthly allowance is counted from and the only record of what the app has made for you.

Server logs are kept for no longer than 30 days, then deleted. Error reports are kept for up to 90 days.

If you unsubscribe from marketing, we keep a record of that so we do not email you again by mistake.

Your rights

Depending on the laws that apply to you, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information, and to withdraw consent where processing is based on consent. You can contact us to ask about these rights.

To make a privacy request, email support@crateprep.com. We will respond in accordance with applicable law and may ask for information needed to verify your request.

Deleting your account removes your account details and edit records, subject to any records we are required to retain. Files you have already downloaded remain on your own device.

Contact and complaints

For questions about this notice or your personal information, email support@crateprep.com.

If you are concerned about how your personal information has been handled, please contact us first at support@crateprep.com. You may also contact the relevant data protection authority in your jurisdiction.