Privacy Policy

Craftor Limited ("Craftor", "we", "us") operates craftor.net and the Craftor WordPress plugin licensing service. We're the data controller for the personal data described below. This policy explains what we collect, why, and what rights you have over it.

What we collect

• Account information — your name, email address, and a bcrypt-hashed password (we never store or see your plaintext password).
• Payment information — handled entirely by Stripe. We never see or store your full card number; we only keep the tier, amount, and Stripe's own reference IDs for your purchase.
• License & activation data — your license key and which WordPress site URLs you've activated it on, so we can enforce your plan's site limit.
• Messages you send us — presales questions and support requests, including which license a support request refers to.
• Anonymous pageview analytics on our marketing site — the page path and referring page only. No cookies, no IP address, and no data that identifies you individually.

Cookies

We use exactly one cookie: a session cookie that keeps you signed in. It's strictly necessary for the service to function, isn't used for tracking or advertising, and isn't shared with any third party.

How we use it

• To run your account, dashboard, and license activations.
• To process payment and issue, validate, and renew license keys.
• To respond to presales questions and support requests.
• To detect and limit abuse — e.g. rate-limiting repeated requests to our licensing API.
• To understand aggregate traffic to our marketing site.

Who we share it with

Stripe, Inc. processes all payments on our behalf and independently acts as a data controller for that payment data — see Stripe's own privacy policy at stripe.com/privacy. We don't sell or rent your personal data to anyone, and we don't use any third-party analytics, advertising, or tracking scripts.

International transfers

We're based in the United Kingdom. Stripe may process payment data outside the UK/EEA (including in the United States) under its own compliant safeguards.

How long we keep it

We keep account and license data for as long as your account exists, plus whatever period we're legally required to retain for tax and accounting purposes afterward. Aggregate pageview analytics are kept indefinitely but never contain anything that identifies you individually.

Your rights

Under UK GDPR, you have the right to access, correct, or erase your personal data, restrict or object to its processing, request a portable copy of it, and complain to the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.

Children

Craftor isn't directed at, and we don't knowingly collect data from, children under 16.

Changes to this policy

If we make a material change to this policy, we'll update the date below and, where appropriate, let existing customers know by email.