Privacy Policy

Last updated: July 15, 2026

This policy explains what data Crafyne collects and why, in plain language. Short version: we collect what's needed to run the service, we don't sell it, and Crafyne products show no ads.

1. What we collect

Account data: your handle, name, email, avatar, and the ID from your sign-in provider (GitHub or Google) or a hashed password if you sign up by email. Optional profile fields (bio, links) are public by design.

Content: the projects, files, and sites you create or upload, and your conversations with the AI builder. Direct messages between users, including image attachments.

Billing metadata: your plan, subscription status, and card brand/last four digits — the actual payment details are held by Lemon Squeezy, not us.

Usage data: aggregated page-view analytics for your sites (views by day, country, path, referrer) and standard server logs kept for security and debugging.

2. How we use it

To run the service: hosting your sites, delivering messages, processing AI requests, billing, and transactional email (verification, password reset, security notices, reminders you can turn off).

We don't sell your data, and Crafyne products display no advertising.

3. Cookies & local storage

One session cookie keeps you signed in (host-only, HttpOnly). Theme and language preferences live in your browser's localStorage. There are no advertising or cross-site tracking cookies.

4. Who processes data for us

Cloudflare (hosting, storage, database, transactional email), Lemon Squeezy (payments, as merchant of record), our domain registrar partner (when you buy a domain: registration data required by the registry), AI model providers (your prompts and site content are processed to generate output; Workers AI, and where configured Anthropic/Google), and GitHub/Google for sign-in. Landing pages load fonts from Google Fonts.

5. How long we keep it

Direct messages: conversations idle for 6 months are deleted automatically (reported-message snapshots are kept as moderation evidence). Deploys and site versions: kept while the project exists so rollback works. Account deletion: 7-day grace period, then account, projects, sites, messages, and attachments are permanently removed.

6. Your rights

You can view and edit your profile, export any project as a .zip, and delete your account yourself from settings. For anything else — access, correction, or complaints — email support@crafyne.app. If you're in a jurisdiction with specific data-protection rights (GDPR and similar), we honor access, rectification, deletion, and portability requests.

7. Security

Everything is served over HTTPS. Passwords are stored hashed, never in plain text. User-generated sites are served from a separate domain (crafyne.site) so they can never read your crafyne.app session. No system is perfectly secure — if we learn of a breach affecting you, we'll notify you.

8. Children & changes

Crafyne isn't directed at children under 13, and we don't knowingly collect their data. We may update this policy; material changes will be announced on the site.

Contact: support@crafyne.app.

Read this in Bahasa Indonesia · Terms of Service · Contact