Privacy policy
Last updated 2026-11-04
What we collect
Catalog data comes from the platforms (YouTube, Vimeo, TikTok) and is public. About you we collect: • Account data when you sign in with Google: name, email, photo. • Viewing behaviour: which works you open, play, pause, seek, how far you watch, when you leave, your ratings, reviews and lists. • Technical data: browser, screen size, language, time zone, approximate country derived from your IP address, referrer and campaign parameters. • An anonymous visitor identifier in a first-party cookie when analytics are allowed by your choice or the regional default.
Why
To rank works by how people actually watch them, to show you your library and ratings, to detect abuse of the rating system, and to show advertising (Google AdSense) that funds the service.
Consent
Analytics stay off in the EU/EEA, UK, Switzerland and Korea until you choose Allow analytics. We use the same opt-in default when your country is unknown. In other regions analytics start on; choose Essential only to turn them off. When analytics are allowed, we use a visitor identifier lasting 13 months. Otherwise, playback is recorded only in aggregate using a session identifier. Change your choice through Consent settings in the footer. Personalised advertising consent is handled through Google’s separate consent process; allowing analytics does not grant advertising consent.
Advertising and advertising consent
Google AdSense may use cookies and device information to deliver and measure ads. Advertising consent is separate from crateh viewing analytics. In the Google message you can consent, refuse or manage individual purposes, and change your choices using Advertising privacy settings below. Refusing advertising consent does not prevent access to works.
Cookies and storage
crate.locale (UI language), crate.wl (work language filter), crate.theme, crate.vid (visitor id, after consent), crate.consent, crate.consent.default and crate.autonext in local storage, Firebase Auth session storage when signed in, and Google advertising cookies when consented.
Retention
Raw event logs are deleted after 90 days. Per-session viewing summaries and aggregated statistics per work are kept indefinitely in a form that does not identify you. Account data is kept until you delete your account.
Sharing
We do not sell personal information. Service providers: Vercel (website hosting), Google Firebase (authentication and database), and Google Analytics and AdSense (analytics and advertising, subject to their respective choices). Embedded players are provided by YouTube, Vimeo or TikTok; their policies apply after you press play.
Your rights
You can access, correct or delete your account data and withdraw consent. Residents of the EEA/UK and Korea have the rights granted by GDPR/UK GDPR and PIPA respectively.
Contact
hello@crateh.com