Privacy Policy
Last updated October 15, 2026
The short version: we collect what it takes to run your account and sync your work. We don't sell your data, run ads, or use tracking cookies.
What we collect
- Your email address, to sign you in, send sign-in links, and contact you about your account.
- Your saved work: jobs, crate designs, materials, prices and shop settings you save while signed in, so they sync between your devices.
- Your plan: which plan and add-ons your account has.
- Early-access sign-ups: if you join the list on cratesmith.app, the name, email and shop details you enter.
- Basic server logs (such as IP address and browser type), kept by our hosting provider for security and troubleshooting.
What we don't collect
- Card numbers or bank details. Polar and its payment processor handle those; we only learn what you bought and whether it's active.
- Files you open for reading in the browser, such as a Mozaik Materials.dat. They're read on your device and aren't uploaded.
- Advertising or cross-site tracking data. We don't use analytics or ad cookies.
On your device
The app keeps your work and settings in your browser's local storage so it works offline and loads fast. Signing in stores a sign-in token there too. Signing out clears your account's data from that browser.
Who processes data for us
- Cloudflare: hosts the website and app, and stores early-access sign-ups.
- Supabase: accounts and your synced library (servers in the United States).
- Resend: sends sign-in emails.
- Polar: checkout, billing and tax, as merchant of record.
They process data only to provide their service to us. We don't sell or rent personal information to anyone.
How long we keep it
We keep your account and saved work while your account is open. If you ask us to delete your account, we delete it and your synced library within 30 days. Polar keeps purchase records as tax law requires.
Your choices
You can ask for a copy of your data, a correction, or deletion by emailing [email protected] from your account email. We reply within 30 days. If you live somewhere with additional privacy rights, such as California or the EU, we'll honor them.
Children
Cratesmith is a business tool and isn't meant for anyone under 18.
Changes
If we change this policy in a way that matters, we'll update the date above and email account holders.