Privacy Policy
Overview
CraftCut is built with privacy as a core principle. Your furniture designs, project data, and personal information belong to you. This policy explains what data we collect, how we use it, and your rights.
In short: CraftCut is a browser-based application. Your designs never leave your device. We collect minimal, anonymized analytics data to improve the product and nothing more.
1. Data That Stays on Your Device
CraftCut is a client-side web application. The following data is created and stored exclusively in your browser's local storage and is never transmitted to our servers:
- Furniture designs and project files
- Panel dimensions, materials, and configurations
- Cut lists and optimization results
- 3D previews and assembly instructions
- Exported booklets and production documents
- Application settings and preferences
We have no ability to access, view, or recover this data. If you clear your browser storage, this data is permanently deleted. We recommend exporting important projects regularly to avoid accidental data loss.
2. Data We Collect
When you visit our website (craftcut.io), we may collect limited, anonymized usage data to understand how the site is used and to improve the experience:
- Analytics data: Page views, referral sources, approximate geographic region (country-level), browser type, and device type. This data is collected via privacy-respecting analytics and does not include personally identifiable information.
- Error reports: Anonymous, automated error logs that help us identify and fix bugs. These contain no personal data or project content.
- Performance metrics: Anonymized page load times and interaction timings that help us optimize the application experience.
3. Data We Do Not Collect
We do not collect, store, or process:
- Names, email addresses, or account credentials (CraftCut does not require an account)
- Any content from your designs or projects
- Payment or financial information
- Precise location data (IP addresses are not logged or stored)
- Advertising profiles or cross-site tracking data
- Biometric data, device identifiers, or fingerprinting information
4. Legal Basis for Data Processing
Where applicable (including under the EU General Data Protection Regulation), our legal basis for processing any data is:
- Legitimate interest: We collect minimal, anonymized analytics data to improve CraftCut's performance and user experience. This processing is proportionate and does not override your privacy rights.
- Consent: Where required by local law, we will obtain your consent before setting any non-essential cookies or collecting analytics data.
5. Cookies & Local Storage
CraftCut uses browser local storage to save your projects and preferences locally on your device. This is essential for the application to function and does not involve transmitting data externally.
We do not use tracking cookies. If we use analytics, they rely on privacy-respecting, cookie-free methods where possible. No third-party advertising or retargeting cookies are set.
6. Third-Party Services
CraftCut may use the following third-party services:
- Cloudflare: For hosting and content delivery. Cloudflare may process limited connection metadata (such as IP addresses) for security and performance purposes. Subject to Cloudflare's Privacy Policy.
- Google Fonts: For typography. Font files are loaded from Google's servers, which may log standard access information. Subject to Google's Privacy Policy.
We carefully vet third-party services and only use those with strong privacy commitments. We do not sell, rent, or share any data with third parties for advertising or marketing purposes.
7. Data Retention
Since your project data is stored locally in your browser, you have full control over its retention. CraftCut does not maintain any server-side copies of your data.
- Local project data: Retained in your browser until you delete it or clear browser storage. There is no expiration date.
- Analytics data: Anonymized analytics data is retained for up to 24 months to identify long-term trends, then automatically purged.
- Error logs: Automatically deleted after 90 days.
8. Data Security
We take the security of our service seriously:
- The CraftCut website and application are served exclusively over HTTPS, ensuring all data in transit is encrypted.
- We use Cloudflare's security infrastructure, including DDoS protection and Web Application Firewall (WAF).
- Since no user data is stored on our servers, the risk of server-side data breaches affecting your personal information is effectively eliminated.
- We regularly review and update our infrastructure and dependencies to address known vulnerabilities.
9. International Data Transfers
CraftCut's website is delivered via Cloudflare's global CDN network. When you access the site, your request may be routed through servers in various countries. However, since CraftCut does not collect or store personal data on its servers, no personal data transfers occur as a result of using the application.
For anonymized analytics data, processing may occur on servers located in the European Union or the United States. Where transfers outside the EU occur, they are governed by appropriate safeguards such as Standard Contractual Clauses.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your data:
- Right of access: You can request information about any data we hold related to you. Given our minimal data collection, this is likely limited to anonymized analytics.
- Right to erasure: You can request deletion of any data associated with you. For local project data, you can delete it directly from your browser at any time.
- Right to object: You can object to our processing of anonymized analytics data. You may also use browser settings or extensions to block analytics scripts.
- Right to data portability: Your project data is stored locally and can be exported from the application in standard formats at any time.
- Right to lodge a complaint: You have the right to file a complaint with your local data protection authority if you believe your rights have been violated.
To exercise any of these rights, contact us at hello@craftcut.io. We will respond within 30 days.
11. Transparency
CraftCut is committed to being transparent about how data is handled. We believe privacy should be the default, not an afterthought. If you have questions about our data practices, we encourage you to contact us and we will provide clear, honest answers.
12. Children's Privacy
CraftCut does not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). Since we do not require accounts or collect personal data, the application can be used by individuals of all ages under appropriate supervision.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable laws. Changes will be posted on this page with an updated revision date. For material changes, we may also provide notice within the application. Continued use of CraftCut after changes constitutes acceptance of the updated policy.
14. Contact
If you have questions about this privacy policy, your data, or wish to exercise your rights, contact us at hello@craftcut.io.