Privacy Policy

This policy explains what information Craftfolio collects, how we use it, who we share it with, and the choices you have. It applies to the website and account at https://craftfolio.dev.

Account data: your username, email address, and a securely hashed password (we never store your password in plain text). Profile and community data you submit: names, bios, links, skills, and any optional details you add such as country, timezone, and, if you provide them, contact details like a phone number or date of birth. Uploads: profile photos, banners, community and partner logos, project images, and files such as a CV or résumé. Content you post: community posts, events, newsletters, comments, and similar. Messages you send: if you use a "contact the developer" form, the name, email, and message you enter, which are delivered to that developer. Sign-in data: if you sign in with GitHub or Google, the basic account identity and email that provider shares. Technical data: standard server logs (such as IP address and request metadata) needed to run and secure the service. We do not run third-party analytics or advertising trackers.

To create and secure your account; to power discovery and display profiles, communities, and their content; to deliver messages you send through the service; to operate, maintain, debug, and improve Craftfolio; and to comply with legal obligations. We do not use your content to train AI models, and Craftfolio does not use AI or LLM features (see section 11).

Profiles and community listings are intended to be publicly discoverable: your public profile, community pages, leadership, posts, events, and similar are meant to be seen. Some details are not meant to be published: for example a phone number or date of birth you add is used for account purposes and is not shown on your public profile, and messages sent to a developer through a contact form are private to that developer. Please don't submit anything into public fields that you don't want indexed and shown publicly.

We don't sell your personal data, and we don't share it with advertisers. We rely on a limited set of third parties to run the service:

• Hosting & storage: our cloud/server infrastructure stores the database and uploaded files.
• GitHub and Google: used only if you choose to sign in with them (OAuth). We receive your basic account identity and email from the provider you pick.
• Google Fonts: serves the web fonts used by the interface. Your browser requests them directly from Google.

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case we'll give notice where required.

We use only the cookies needed to operate the site, chiefly a secure, HTTP-only session cookie that keeps you signed in. We do not use tracking, advertising, or third-party analytics cookies. Note that web fonts are served by Google Fonts, so your browser contacts Google to load them. If we add analytics or other non-essential cookies in future, we'll update this policy and ask for consent where required.

We keep your account and content for as long as your account is active or your listing is published. When you delete a listing, post, or uploaded file, we remove it from the live service and delete the underlying stored file within a reasonable clean-up window (short-term backups may persist briefly). When you close your account, we delete or de-identify your personal data except where we must keep some of it to meet a legal obligation.

Subject to applicable law, you can access, correct, export, or delete your data. From your account settings you can edit your profile and deactivate your account at any time. Full account deletion is being rolled out for self-service; in the meantime you can request deletion or a copy of your data by emailing privacy@craftfolio.dev and we will action it within a reasonable time. You can also withdraw consent for optional data (such as a phone number) by removing it from your profile.

We hash passwords with a strong algorithm (argon2), keep your session token in a secure HTTP-only cookie so it isn't exposed to scripts in your browser, serve the site over HTTPS, and apply access controls on the server. No system is perfectly secure, but we work to protect your information in transit and at rest and to fix issues promptly.

Craftfolio does not currently use AI or large-language-model features in the product, and we do not send your content to AI providers or use it to train models. If we add AI features in the future, we will update this policy and the Terms to describe what data is involved and how it's handled before those features ship.

Craftfolio is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we'll remove it.

Your data may be processed in countries other than your own, including where our hosting and sign-in providers operate. Where required, we take steps to protect it in transit and at rest and to use appropriate safeguards for such transfers.

We'll update this policy as the product changes, revise the "last updated" date above, and give notice of material changes. Continuing to use Craftfolio after an update takes effect means you accept it.

Privacy questions, or want to exercise your rights? Reach us at privacy@craftfolio.dev. (Provisional address, to be confirmed before public launch.)