Privacy Policy
Effective October 17, 2026
CrateShelf is a personal application, operated by CW King in the United States for cataloguing his own vinyl and CD collection. This policy explains what CrateShelf does with data, especially data it receives from Google.
Who it serves
CrateShelf has one user, its owner. It offers no public accounts and collects no data about visitors to this website beyond the standard web server logs kept by the hosting server.
Google data CrateShelf accesses
With the owner's permission, CrateShelf uses the Gmail API with the read-only scope (gmail.readonly). That scope lets it search and read messages in the owner's Gmail account. It doesn't let CrateShelf send, modify, label, or delete anything, and CrateShelf requests no other Google scopes.
How CrateShelf uses that data
CrateShelf searches the mailbox once a week, or when the owner asks, for emails about purchases of physical music: order confirmations, payment notices, shipping and delivery updates, cancellations, and refunds. From those emails it pulls out the seller, the items ordered, prices, tax, shipping charges, order numbers, and delivery status, and uses them to fill in the owner's collection and on-order list. The owner reviews anything uncertain before it's recorded. Google data is used only for this feature.
What CrateShelf keeps
- Emails that aren't about music purchases. Only the sender, subject, date, and message identifiers are kept, so the same message isn't processed twice. The body is not stored.
- Payment, shipping, and delivery emails. The message is stored encrypted while it's being processed. The body is deleted within 30 days after its details have been recorded.
- Order confirmations, cancellations, refunds, and returns. At the owner's choice, these are kept indefinitely as encrypted receipts, because they document what was paid.
- Google sign-in tokens. The tokens Google issues are stored encrypted and used only to read the mailbox as described above.
AI processing
If the owner turns on AI email processing, CrateShelf sends the text of likely purchase emails to Anthropic's Claude API, which extracts the order details. Before anything is sent, CrateShelf removes shipping and billing addresses, phone numbers, partial card numbers, and email addresses other than the sender's. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models by default. CrateShelf doesn't opt in to training and doesn't submit feedback that would change that.
CrateShelf does not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
Sharing
CrateShelf doesn't sell Google user data, use it for advertising, or share it with anyone other than the AI processing described above. No person other than the owner reads it. Catalog lookups sent to public music databases (such as Discogs, MusicBrainz, and Cover Art Archive) contain barcodes, titles, and artist names, never email content.
Limited Use
CrateShelf's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Security
CrateShelf runs on computers and a server controlled by the owner. Connections use HTTPS, stored email content and credentials are encrypted, and backups are encrypted.
Revoking access and deleting data
Gmail access can be revoked at any time from the Google Account page at myaccount.google.com/permissions. When access is revoked, CrateShelf stops reading the mailbox. Stored email data is deleted on request to the contact address below.
Changes
If this policy changes, the new version will be posted here with a new effective date.