Privacy policy

1. Introduction

This privacy policy explains how we collect, use and protect your personal information when you use craftr.com and the Craftr tools (NameCraftr at name.craftr.com, and the others as they open). We respect your privacy and are committed to safeguarding your personal information. By using our websites, you consent to our collection and use of your personal information as described here.

2. Who we are

VANEIVY Ltd. ("we", "us", "our") operates craftr.com and the Craftr tools and is responsible for processing any personal data shared by you. We are the "data controller" under the General Data Protection Regulation (GDPR), which means we are principally responsible for the protection of your data.

For any queries, you may contact us at [email protected].

3. What information we collect

When you access our websites, we may collect the following information:

• IP address and approximate location
• Information about your browser type and version
• Internet service provider (ISP)
• Operating system
• Date and time of access
• Links you click to access our websites, and links you click within them
• Website usage data

If you use a contact form (or otherwise communicate with us directly), we may also collect your email address and any other personal data you provide in your message.

If you create a Craftr account, we also store your email address, an optional display name, your email preferences, and what you save in each tool (for example the names you favourite in NameCraftr).

4. Why we use this information

We use the personal data collected for the following purposes:

• To provide access to our services: certain data is necessary for the technical delivery of our websites.
• To customise your experience: for instance, using your approximate location to tailor certain content.
• To improve our services: we analyse usage data and feedback to enhance our tools.
• To communicate with you: if you contact us, we use your information to respond to queries or provide support.

5. Who we share your personal data with

• Hosting and infrastructure providers: your data may be shared with our hosting providers, which act as our "processors", enabling us to deliver the websites to you.
• Analytics services: we may use Google Analytics or similar services to assess website traffic and user interactions. These services may process data (for example your IP address) on our behalf.
• International transfers: if an analytics or other provider is based outside the European Union (for example in the United States), we take steps to ensure an appropriate level of data protection, such as EU-approved standard contractual clauses or an adequacy decision where applicable.
• Legal requirements: we may be compelled by law enforcement, government agencies or judicial authorities to disclose data if required to do so.

6. Legal basis for processing

Wherever we process your personal data, we do so under one of the following legal bases:

• Consent: where you have given clear consent for us to process your personal data (for example agreeing to certain types of cookies or emails).
• Legitimate interests: where processing is necessary for our legitimate interests, provided these are not overridden by your fundamental rights and freedoms.
• Legal obligations: where we have a legal or regulatory obligation to process personal data.

7. Your rights

Under the GDPR you have several rights relating to your personal data:

• Right of access: you can request a copy of the personal data we hold about you, and information on how and why we process it.
• Right of rectification: you can ask us to correct incomplete or inaccurate data.
• Right of erasure: in certain circumstances you can ask us to delete your personal data if there is no compelling reason for us to continue using it.
• Right to restrict processing: you can request that we suspend processing in certain scenarios (for example if you contest its accuracy).
• Right to object: if we process your personal data on the basis of legitimate interests, you have the right to object.
• Right to data portability: you can request your personal data in a commonly used machine-readable format, or ask for it to be transferred to a third party.
• Right not to be subject to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling.

To exercise any of these rights, contact us at [email protected]. If you believe we are violating your rights, you have the right to lodge a complaint with your local supervisory authority.

8. Data processors

We rely on the following third-party processors to deliver the Craftr tools:

• Supabase: authentication and database. Stores your account record and what you save in each tool. Privacy policy.
• Brevo: email marketing and transactional email. Receives your email address and event activity so we can send relevant follow-ups. Privacy policy.
• Fly.io: hosting of the websites.
• Stellar: on-site A/B testing and analytics on NameCraftr.
• Google Tag Manager: container for measurement scripts.

You can delete your account at any time from your account page. Deletion removes your profile, what you saved in every tool, and your event history, and also requests deletion of your contact record in Brevo.

9. Data retention

• Website access data: information technically required for you to access our websites is generally retained for up to 14 months (or as otherwise required by law or for legitimate business purposes).
• Contact form and email communications: information we receive through a contact form or by email is retained for approximately 365 days from the date of our last interaction, unless we need to keep it longer for legal or regulatory reasons.
• Account data: kept for as long as your account exists, and deleted when you delete it, except purchase records where the law requires us to keep them.

10. Security measures

We use appropriate technical and organisational measures to safeguard the personal data we process. These measures are designed to provide a level of security appropriate to the risk of processing your personal data.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our data practices or relevant laws. Changes are posted on this page with an updated date. If you have questions about this policy or our data practices, contact us at [email protected].

See also our terms of use and cookie policy.