Everycrate / PRIVACY POLICY

Privacy policy

Last updated October 13, 2026. Everycrate is run by Andrew Braun ("we", "us"). This policy says what Everycrate keeps about you and about the people who buy from you, what it is for, who helps us run it, and what you can ask us.

What we keep about you

• Your account: your email address, when you log in, and the kind of device (for example "iPhone"). To limit login attempts, the internet address a login comes from is remembered for up to an hour.
• Your records: what you put into Everycrate: photos, records and their details, grades, prices, notes, stock, sales, orders and settings.
• Your connections: the keys that let Everycrate act on the accounts you connect (Discogs, eBay, Etsy and others), and what it reads from them for you: your listings, orders, offers and messages.
• Your subscription: your plan and the Stripe customer it belongs to. Your card details go to Stripe; we never see or keep them.
• Use: how much photo reading your account used each day, to keep it within its allowance.
• What your Everycrate adds to its catalogue: unless you turn it off in Settings (Stock, Sharing), your photos of covers, labels and runouts, your runout readings, what your copies' covers and labels show (bar code, catalogue number, label, country, discs, vinyl colour), and the records you make of pressings the catalogue lacks, as section 6 of the terms says. What you choose to share: only when you tick it, the prices, grades and months of sales at your counter, at shows, on Whatnot or in your own Shopify store, and which pressings you hold. Both are kept in Everycrate's catalogue, apart from your records, under your account's number.

What we keep about your buyers

When you sell, the sites you sell on give Everycrate the buyer's name, shipping address and, sometimes, email and phone, so you can ship the order; offers and messages can carry a buyer's username. We keep these only for you and only for that purpose. By default a buyer's name, address, email and phone are removed from an order 90 days after it ships, and from any order after 400 days at most. When eBay tells us that an eBay member has closed their account, we delete what any seller's Everycrate holds about that member. A buyer can ask us to delete their details: see "What you can ask us".

How people find Everycrate

To learn which of our posts, advertisements and partners bring sellers to Everycrate, our website (geteverycrate.com) and this service record a few steps of the way themselves. No analytics company, advertising network or other third party receives them; they are never sold or shared, and never used to show anyone advertising. (Our website also runs Google's advertising tag, which is Google's own: see the end of this section.)

• On our website: our own script keeps a cookie called ec_attr for our website and this service (both are under one domain). It holds a random visitor number and how you first came to us, and how you came most recently: the words in the link you followed (its source, campaign, advertisement and creator code: parts of the link such as utm_source, utm_campaign, utm_content and ref), the page you arrived on, the name of the website that sent you (not its page), and when. It lasts 90 days from your last visit. With that number we record when you arrive on one of our pages, open "See the current app", and press a button that leads here. Links from our website to this service carry the same details, in case your browser blocks the cookie. Your internet address is not kept with any of it.
• When you ask for a place or make an account: we record when the form to ask for a place is shown, apart from when a request is sent (never with the address typed in it); those details (or the words in a link that led straight here) are kept with your request and copied to your account once, so we know what brought you. We then record when you connect Discogs, start and finish your first record, prepare your first listing or file for a site, and start or end a subscription: when each happened and, for a subscription, its plan. Never the record itself, its photos, its prices or its buyers.
• If your browser sends Global Privacy Control or Do Not Track, our website sets no cookie and records none of its steps, and nothing about where you came from is kept with your request or your account. The steps in Everycrate itself are still recorded, without where you came from: they are part of running the service.

These records are kept for 400 days, then deleted. They name an account by its number, never by its email address.

Google's advertising tag, on our website only. Our website (geteverycrate.com) also runs Google's advertising tag, to learn which of our Google ads bring visitors. This service, where you work with your records, does not run it. When the tag runs, Google receives that you visited, the page, and the ad you came from, and may set its cookies (for example _gcl_au), under Google's privacy policy. It does not run at all for a browser that sends Global Privacy Control or Do Not Track. In the European Economic Area, the United Kingdom and Switzerland it sets no cookie. We do not sell personal information.

What it is used for

To run Everycrate for you: to read your photos, find pressings, list and update your records, keep your stock right, ship your orders and send you login links and notices. To bill your subscription. To keep the service secure and working. To learn which of our posts and advertisements bring sellers, as the section above says. We do not sell personal information, we show no advertising, and we do not use your records, your photos or your buyers' details to train AI models. What your Everycrate adds to the catalogue is shown without your name or your account, to every seller and wherever Everycrate shows its catalogue (its websites and apps, and partners who show it); what you choose to share is shown to the other sellers the same way: sale prices only as medians of at least 5 sales by at least 3 sellers, and what you hold only as a count of at least 3 sellers. No buyer's details are ever shared, and photos lose any location and camera details first.

Who helps us run it

• Hetzner Online GmbH runs our servers. Your records live there.
• Resend delivers the emails we send you.
• Stripe takes payments and keeps card details.
• Anthropic reads the photos you take (under its commercial terms, it does not use them to train its models).
• The sites you connect (Discogs, eBay, Etsy, Shopify, Amazon, Square, Shippo and others) receive what you send them through Everycrate, such as listings, tracking numbers and messages, under their own privacy policies.

Apart from what Google's tag on our website sends Google ("How people find Everycrate"), we share information with others only when the law requires it, and, when you switch sharing on, what you chose to share goes to the other sellers on Everycrate as described above.

How long we keep it

While your account is open, we keep your records. When it ends, they are kept for 90 days, in case you come back, and then deleted, with their backups. Sale prices and holdings you shared are kept while their box is ticked; unticking one takes it back within a few minutes, and so does deleting your account. What your Everycrate added to the catalogue (photos, readings, what covers and labels show, records of pressings it lacked) stays in it under the licence in section 6 of the terms, with no link to your account once the account is deleted; we remove any particular photo on request within 30 days.

Each account's records are backed up every day on the server. A backup is deleted once it is 14 days old, and no more than 14 are kept of each kind (the daily copy, a copy made with Back up now, the copy made before a restore or an update), except the newest of each kind, which stays until a newer one of its kind replaces it, so there is always one to go back to, and the newest complete backup, which stays while every newer one is missing a part (never longer than the longest we keep any buyer's details). A backup holds the records as they were on the day it was made.

When a buyer's details are deleted (at the buyer's request, when eBay tells us that an eBay member has closed their account, or when an order passes the days above), the deletion is written down apart from the records, as a fingerprint that does not name the buyer, and it is applied again whenever a backup is restored, before anything restored is shown. So a restore never brings those details back. The order itself (what was sold, the amounts and the dates) stays, for the seller's accounts. The app's own log keeps 90 days. The service's record of logins and account events names an account by a number, not by its email address.

How it is protected

Every page travels over HTTPS. Each account runs as a separate copy of the app, under a system user of its own, so one seller's copy cannot open another seller's records or the service's own files, and each copy's requests are signed with a key of its own. Only we can reach the servers.

What you can ask us

You can download everything in your account at any time (Settings, Backups, Export everything), correct it in Everycrate, disconnect any site in Settings, or ask us to delete your account and your records. A buyer can ask us to delete what we hold about them. Where you live may give you other rights too (for example in California, the European Union or the United Kingdom). Write to support@geteverycrate.com: we answer within 30 days.

Children

Everycrate is for sellers aged 18 and over.

Changes

If we change this policy in a way that matters, we tell you, and Everycrate asks you to agree before you carry on.

Contact

Write to support@geteverycrate.com.