Crater is a small, independently-run app for cataloging a vinyl record collection — built and operated by one person, not a company. This page explains, plainly, what data the app collects, why, and where it goes. If anything here is unclear, email sreekar@cratervinyl.com.

• Account: the email and password you sign up with. Password is never visible to Crater — Supabase (the auth provider) handles that.
• Profile: your username, an optional display name, and your public/private and message-request toggles.
• Your collection: whatever you enter or scan — artist, album, year, genres, notes, and where/when you got it.
• Messages: if you message another collector, the message text itself, stored only inside that accepted conversation.
• AI feature usage: which AI feature you used and when, purely to enforce a daily usage cap per feature. Not the content of what you asked — just a timestamp and a token count.

A new account's collection is private — visible only to you — until you flip it public in Settings. If you make it public, other people (including people without an account) can browse your records, favorites, and username/display name. Your email address is never shown, public or not.

Crater is built on a handful of outside services to actually work. Each one only sees what it needs to do its specific job:

• Supabase — hosts the database and handles login. Effectively everything above lives here.
• Anthropic (Claude) — powers the AI features (photo scan, DJ Mode, My Taste, Discover). Using one of these sends the relevant text, or a photo for scanning, to Anthropic to generate a response. Scanned photos are processed and discarded — Crater never stores the image itself, only the record details extracted from it.
• Apple's iTunes Search API — looked up server-side by artist/album name to fetch cover art and preview clips. No account or personal info is sent.
• Komoot (Photon) — if you use the location autocomplete on "where you got it," what you type is sent directly from your browser to Komoot's public place-search service to find matches.
• Resend — sends transactional email on Crater's behalf: sign-up confirmation, password reset, and message-request notifications.
• Vercel — hosts the app itself.

None of these get your data for their own use — they're processors doing one job each, the same way any hosted app depends on infrastructure providers.

Nobody can message you unless you turn messaging on in Settings. Even then, a first message from someone new is a request — nothing is delivered until you accept it. You can block anyone at any time. If you're in an accepted conversation, Crater uses the other person's email address only on the server, to send them a "you have a new message" notification — it's never displayed to them or to you in the app.

No ads. No analytics or tracking scripts of any kind — nothing watching how you use the app. No selling, renting, or sharing your data with anyone for marketing. Nothing beyond the processors listed above ever receives your data.

Every account's data is isolated at the database level using Postgres Row Level Security — the database itself refuses to return or modify another account's rows, not just the app's own code. This has been tested directly (one account genuinely cannot read, edit, or delete another's records or usage data). That said, no system is perfectly secure, and this is a small project run by one person — treat it accordingly.

You can make your collection private again at any time in Settings. There's no self-serve "delete my account" button yet — email sreekar@cratervinyl.com and your account and all associated data will be deleted by hand.

If what Crater collects or how it's used changes in a meaningful way, this page will be updated and the date at the top will change.