Privacy Policy

Effective date: September 12, 2026

Milk Crate is an iOS app. There is no Milk Crate account.

Data we collect and how we use it

Discogs OAuth: after you authorize the app, we call Discogs to read your collection and wantlist and to search and display releases.

HTTP proxy: this site signs those Discogs API calls. We keep a session token on the proxy. After you subscribe, we also store Apple’s originalTransactionId on that session so we can confirm the yearly subscription is active. The app stores the session token in the iOS keychain and your Discogs username on the device.

Sentry: crash reports, performance tracing, and sampled session replay. sendDefaultPii is enabled, so Sentry may receive identifiers such as a username. This is used to fix bugs, not for advertising.

Camera is used only for on-device barcode scanning. We do not store or upload photos. Apple processes App Store payments; we do not collect your card number or Apple ID password.

Third parties, retention, and deletion

Discogs, Apple, and Sentry receive the data described above. They are required to provide the same or equal protection of that data.

There is no Milk Crate account to delete. Sign out in the app to drop the on-device session. Revoke Discogs access in Discogs application settings. Proxy sessions last up to 30 days. To request deletion of proxy session data, originalTransactionId, and Sentry events, email support@treeheat.net.