Privacy Policy

Last updated 7 August 2026

This policy explains what personal data Crates ("we", "us"), operated by Crate Software Solutions, collects when you use cratess.com, why, and your rights. We are the data controller for this data. For UK data protection law, our contact point is j.creasy@redfoxss.co.uk.

What we collect

• Account data — your email address, username, password (stored hashed, never in plain text) and any profile details or messages you choose to add.
• Gameplay data — your in-game activity, holdings, progress and purchases, so the game can work.
• Technical data — your IP address, browser and basic log data, used to keep the Service secure and running.
• Payment data — if you buy CrateCoin, our payment provider Stripe handles your card details. We do not see or store your full card number; we only receive confirmation that a payment succeeded.

Why we use it (lawful basis)

We use your data to provide the game and your account (performance of a contract), to keep the Service secure and prevent abuse (our legitimate interests), to process payments (contract), and to comply with our legal obligations. We do not sell your data, and we do not use it for third-party advertising.

Cookies

We use a small number of cookies: an essential session cookie to keep you logged in, and a referral cookie (about 30 days) that remembers if a friend invited you so they can be credited. We do not use advertising or cross-site tracking cookies.

Who we share it with

We share data only with the providers that make the Service work — our payment processor (Stripe) and our email/hosting providers — and where required by law. These providers only process data on our instructions.

How long we keep it

We keep your account data for as long as your account is active. If you ask us to close your account, we delete or anonymise your personal data except where we must keep some of it for legal or fraud-prevention reasons.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict certain processing, and to data portability. To exercise any of these, email j.creasy@redfoxss.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Children

The Service is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us data, contact us and we will remove it.

Changes

We may update this policy; the "last updated" date above shows when. See also our Terms of Service.