This policy describes the CrateSwap application from Southern Official. For privacy questions or requests, contact support@southernofficial.com.

CrateSwap processes your account email and authentication information, display name, profile photo, optional city, state, biography and favorite genres. It stores collection and wishlist records, uploaded images, offers, trade messages, ratings, reports, blocks, fulfillment details and feedback you submit. Avoid putting sensitive information in public profiles, listings or free-form messages.

Account information supports sign-in and profile features. Listings and collector information support discovery. Transaction information is shared with the participants and used for fulfillment and history. Ratings support reputation. Reports, feedback and operational records support moderation and troubleshooting. Collection visibility depends on your listing settings.

CrateSwap uses Firebase for authentication, database, file storage and backend processing. Push notifications use device push tokens and Expo’s notification service. Discogs searches send lookup information to the configured lookup service. Radio streams and embedded players connect to Live365. External websites and services process connection information under their own policies.

Camera access supports barcode scanning; photo access supports choosing profile and record images. Notifications are permission controlled. Radio can continue playing in the background. The Android app does not request microphone recording permission. You can change device permissions in system settings.

Account data remains stored until removed through the relevant app feature or deletion process. Verified account deletion removes private profile and collection data, wishlist entries, notification tokens and account-owned uploads covered by the process. Completed/shared marketplace history may retain structural participant identifiers for authorization and transaction integrity, while visible names and unnecessary personal details are sanitized. Active marketplace obligations must be resolved before deletion can finish.

The public form stores your email, optional message and request status for ownership verification. Request throttling uses rotating hashed network addresses. It does not disclose whether an account exists. Operational logs, moderation and audit records can contain information used to investigate issues; contact support about data not removed by the automated account workflow.

Edit your profile and listings in the app, manage notification and photo permissions in device settings, and use Delete Account or the public account-deletion page to initiate deletion. A public request alone does not delete an account; ownership verification is required.