Privacy

Who we are. Crate is crate.events, operated by Waybound Strategies LLC, an Oregon company. It turns a reel into a sighting — whatever the reel actually names: a show with its date, its venue on a map and a ticket link, a restaurant with the dish someone went for, a book with its author, and a warm-up playlist when there is music in it. Questions and requests go to mike@wayboundstrategies.com. Our terms say what you agree to by using it.

If you just visit the site

You don't need an account and we don't set cookies of our own. Two things do run on the page:

• Cloudflare Web Analytics counts page views. Cloudflare says it uses no cookies and collects no personal data; we see totals, not people.
• Impact's tracking tag is on every page because Crate has applied to Ticketmaster's affiliate programme through Impact. When it is active it sends Impact the page address, a hashed form of your IP address and a rough location, and it may set cookies of its own — Impact documents these as IR_PI, IR_GBD, a per-campaign IR_ cookie, IRLD and brwsr, lasting from the session up to a year. If you click a ticket link to Ticketmaster or one of its brands it records the click so a purchase can be credited to Crate. Impact's own policy governs what it does with that data. The price you pay is the same either way. Etix and other sellers are plain links.

So visit data does leave the site: to Cloudflare to count views, and to Impact as described. Nothing else on the page reports to anyone. Ticket sellers, Instagram and Spotify have their own privacy policies once you leave for them.

If you have a Crate account

Accounts exist for posters, who publish sightings, and for fans who grab them. Depending on what you connect, we hold:

• Sign in with Google: the account identifier Google gives us, your name and your profile picture. We don't ask for or keep your Gmail. Crate's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Spotify: your Spotify user id and the access tokens you granted, so Crate can read a playlist you choose and create playlists in your library. Nothing else in your Spotify account is read.
• Instagram, posters only: the id of the professional account you connected and the tokens Meta issued, so Crate can publish reels to that account through Meta's API and read what Instagram reports about your own posts. For an account that turns insights on, that includes your reels' view, like, reach and watch numbers, your follower count and the hours your followers are online, and the comments left on your reels — including the username of whoever wrote each comment. Crate does not read your direct messages, and it does not read anyone else's account.
• Grabs: which reel you grabbed and when, so your calendar feed and your map stay yours.
• Sightings, for posters: what you staged: the show, its dates and places, the playlist, and the reels you bound to it. That is the public page.

All of that lives on one private server in Oregon that is not reachable from the public internet. The public site is static pages; it holds no account data.

What a poster can see about fans

If you grab a poster's sighting, they see it as a number, never as you. Their dashboard counts how many people grabbed each sighting and how many of those kept it rather than removing it, broken down by the artists, songs, places and dates involved. Your name, your email, your Spotify account and your Instagram account are never shown to a poster, and no poster can export a list of the people who grabbed anything.

If you are named on a page and never asked to be

Crate's pages name artists, venues and the creators of the reels a sighting was built from, and it keeps the captions and transcripts of those public reels to work out who was playing. That is information about a public post, not an account, and the people in it never signed up. If you are named on a Crate page and want off it, email mike@wayboundstrategies.com and say so — we remove you and keep a record of the request so the next run doesn't put you back.

Sharing, the whole list

Visit data goes to Cloudflare and Impact, as above. Account data goes to Google, Instagram, Spotify and Meta only to do the thing you asked for. We don't sell your information, we don't share it with anyone else, and we don't run ads. Crate is not for children under 13.

Deleting your data

Email mike@wayboundstrategies.com and say "delete my Crate data". Write from the address you signed up with, or tell us the Google, Instagram or Spotify account you connected — any of those identifies you.

Spotify data goes within five days of you asking or of disconnecting Crate in Spotify: that means your Spotify user id and the tokens you granted. Playlists Crate made live in your own Spotify account and are yours to keep or delete there. Everything else goes within 30 days — your account, your other tokens, your grabs and, for posters, your sightings and their public pages. We confirm by reply either way.

Disconnecting Crate inside Google, Instagram or Spotify revokes our access on their side immediately; tell us as well and we clear our copy.

This is also the data-deletion process for the Crate app on Meta's platform.

Changes

When this page changes, the date at the top changes with it.