Privacy Policy

1. What we collect and why

• Contact form. When you send a message we receive your name, email address, subject and message. It is delivered to our email inbox, and we use it only to read and answer your message.
• Newsletter. When you subscribe we store your email address on our mailing list and send you a welcome email. We use the address only to send you the newsletter. Our emails carry no tracking pixels or tracked links, so we do not know whether you open them or click anything in them.
• View and like counts. Articles, photos and project pages show how many times they have been viewed and liked. When you open one of those pages, or press a like button, the site adds one to that count. So that one visitor cannot inflate a count by reloading, our server derives a one-way keyed hash from your IP address (for IPv6, from the network prefix of the address) and keeps it for 6 hours after a view and 30 days after a like. Your IP address itself is not stored, and the counts are not linked to you.
• Search. A search on the site sends your query to our server to find matching pages. The query is not stored.
• Bot protection. The contact and newsletter forms use Cloudflare Turnstile, which examines signals from your browser to tell people from automated programs. Cloudflare also screens traffic to the whole site for abuse.
• Analytics. We use Cloudflare Web Analytics, which does not use cookies and does not track you across sites. It reports aggregate figures to us, such as page views, referring sites, browser types and countries.
• Technical data. Like any website, the site receives your IP address, browser details and the address of the page you requested with every request. Our hosting provider processes this to deliver the site and protect it from attacks.

2. What is stored on your device

We do not set cookies. The site does store a small amount of data in your browser, none of which is sent back to us:

• A flag in local storage for each item you like, so the button stays pressed on your next visit.
• A marker in session storage for each page you view, so the view is counted once per browsing session. It is cleared when you close the tab.
• Copies of pages and images you have visited, kept by the site's service worker so the site loads faster and pages you have read stay available offline.

You can delete all of it by clearing this site's data in your browser settings. Cloudflare may set cookies of its own that are strictly necessary for security, for example after a bot check.

3. Legal bases

If you are in the European Economic Area, the United Kingdom or another place with similar law, we rely on these legal bases. The newsletter is based on your consent, which you can withdraw at any time by unsubscribing. Answering a contact form message is based on the steps you asked us to take and our legitimate interest in replying to people who write to us. The view and like counts, bot protection, analytics and technical data are based on our legitimate interests in running a secure website and understanding, in aggregate, how it is used.

4. Who else handles your data

We do not sell or rent personal data, and we do not share it for advertising. These service providers process it on our behalf:

• Cloudflare, Inc. hosts the site and its database and image storage, and provides Turnstile, bot protection and Web Analytics.
• Resend delivers contact form messages and newsletter emails, and holds the newsletter mailing list.
• Google (Google Workspace) hosts our email inbox, where contact form messages and emails you send us are received.

We may also disclose data when the law requires it, to protect the rights or safety of others, or to a successor if CraftedPxl is merged or sold. These providers are based in the United States and may process data there and in other countries, under their own data transfer safeguards.

5. How long we keep it

• Contact form messages are kept in our inbox for as long as we need them to handle your enquiry and any follow-up, and are then deleted.
• Your newsletter address is kept until you unsubscribe. After that it stays on the list marked as unsubscribed, which is what stops it being subscribed again by someone else. Email us to have it deleted completely.
• The hashes behind the view and like counts expire after 6 hours and 30 days respectively.
• Analytics and technical data are kept by Cloudflare under its own retention periods.

6. Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to withdraw consent you have given. To use any of these rights, email info@craftedpxl.com. We will answer within 30 days. You also have the right to complain to your local data protection authority.

You can unsubscribe from the newsletter with the unsubscribe link in any email we send, or by emailing us with "Unsubscribe" as the subject.

7. Children

The site is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, email us and we will delete it.

8. Security

The site is served only over HTTPS, forms are protected against automated abuse, and access to our administrative tools is restricted to CraftedPxl. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Changes to this policy

When we change this policy we will update the Effective Date at the top of this page. If a change materially affects how we use newsletter subscribers' data, we will also tell subscribers by email.

10. Contact us

Questions about this policy or your data can go to the address below. Our Terms of Use cover how you may use the site itself.

Company: CraftedPxl, LLC
Email: info@craftedpxl.com