Short version: waveform, tempo and key are computed in your own browser and never leave it. The only product data sent anywhere is anonymous, opt-out usage counts.
Last updated 2026-08-26.
When you play a track on Bandcamp, Crate reads the preview audio your browser was already going to play and runs waveform, tempo and key detection on your own machine, in a background offscreen document. The result is drawn in the panel and cached in your browser's local storage so it does not need to be calculated again. It is never uploaded, and Crate has no account system to attach it to.
The extension reports a small number of anonymous events to a self-hosted Umami instance the developer runs:
install / update — that the extension was installed or updated, and which version.
panel_seen — that this installation displayed the Crate panel for the first time. It is sent once.
active_day — that you asked Crate for at least one waveform that day. It is sent at most once per local calendar day.
analysis_started — that a new local analysis began (cached results do not send it).
first_analysis_ok — that this installation completed its first successful analysis. It is sent once.
analysis_ok / analysis_failed — whether an analysis finished, and on failure a short internal error string (not a track name or URL).
analytics_on / analytics_off — that you changed the analytics setting below.
Extension events carry a random installation ID generated on your machine, the extension version, and whether the build is a development or production build. No track titles, artists, albums, Bandcamp URLs or listening history are included.
The Crate website separately counts preview_play, buy_click (including which of the two buy buttons), checkout_success, download_click, and download_success. If you arrived through campaign tags, the short utm_source, utm_medium, utm_campaign, utm_content, and utm_term labels are kept in this browser through the checkout return and attached to those events. Payment details and the Stripe session ID are not sent to Umami.
Umami uses no cookies and anonymizes sessions; like any web server, stats.ykv.lv receives ordinary request metadata such as an IP address and user agent, which Umami uses to generate an anonymous session hash rather than storing it as Crate event data. Opening the site with ?qa=1 disables website analytics for development checks.
Usage counts are on by default. Click the Crate icon in your toolbar and uncheck the analytics box; the setting change is sent once, and no later usage events are sent.
storage — remembers your analytics choice and caches analysis results locally.
offscreen — runs audio decoding and analysis off the visible page, which Manifest V3 requires for background audio work.
Access to bandcamp.com and bcbits.com — reads the preview audio stream and draws the panel into the page.
Access to stats.ykv.lv — sends the anonymous usage counters described above.
Crate is sold once, through Stripe. Stripe handles your card details directly; they do not pass through the extension. See Stripe's privacy policy for its handling of payment data.
Questions about this policy or your data: app@ykv.lv.