Privacy policy

A clear promise: your planning stays yours.

Last updated: September 8, 2026

This Privacy Policy applies to Crafzen (the "Service") provided by Crafzen ("we," "us," or "our"), operating at crafzen.top. It explains how we collect, use, and share information about you when you use our Service. By using the Service, you agree to the collection and use of information as described in this policy.

1. Information we collect

1.1 Personal information

We may collect information that can identify you — such as your name and email address — only when you voluntarily provide it, for example when you use our contact form, subscribe to updates, or request a response from us. Crafzen is designed as a mostly static information site; the calculators and checklist tools run entirely in your browser and do not require an account.

1.2 Usage information

We automatically collect limited technical information about your interaction with our Service, such as:

• IP address (used for security and aggregated analytics only).
• Browser type, device type, and operating system.
• Pages visited, referring URLs, and time spent on pages.
• Approximate geographic region derived from IP (city or country level, not precise location).

1.3 Cookies and tracking technologies

We use cookies and similar technologies (such as web beacons and local storage) to help our Service function and to understand usage. The categories of cookies we use are:

• Essential cookies: Required for the site to display correctly and remember preferences. These cannot be turned off.
• Analytics cookies: Help us understand which articles and tools are most useful so we can improve them. You may opt out below.
• Functional cookies: Remember your choices (such as language or theme) for a better experience.
• Advertising / personalisation cookies: If we display third-party ads, these cookies may be used to show you more relevant content. You can opt out using the links in Section 8.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that if you disable essential cookies, some features of the Service may not function properly.

1.4 Local tool data

When you type into a calculator or checklist tool, the values are processed locally in your browser to display the result. This data is not transmitted to our servers. Do not enter information that you would not want displayed on a shared screen. The printable checklist is generated entirely in the browser.

2. How we use your information

We use your information to:

• Provide, maintain, and improve our Service.
• Communicate with you, including responding to your inquiries and sending service-related updates.
• Personalise your experience where applicable (such as remembering preferences).
• Ensure security, prevent fraud, and detect abuse.
• Comply with legal obligations and protect our rights.
• Analyse usage trends to decide which articles and tools to develop next.

2.1 Legal bases for processing (GDPR)

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data on the following legal bases under the EU GDPR:

• Consent (Article 6(1)(a)): When you consent to cookies, analytics, or marketing communications. You may withdraw consent at any time.
• Contractual necessity (Article 6(1)(b)): To provide the Service you requested, such as responding to a contact form submission.
• Legitimate interests (Article 6(1)(f)): For security, fraud prevention, and aggregated analytics that do not override your rights.
• Legal obligation (Article 6(1)(c)): Where we are required by law to retain or disclose data.

2.2 Legal bases for processing (LGPD)

For users in Brazil, we process personal data on the following legal bases under the Lei Geral de Proteção de Dados (LGPD, Law No. 13.709/2018):

• Consent (Article 7(I)): When you provide consent for a specific purpose.
• Compliance with legal or regulatory duty (Article 7(II)): When required by law.
• Legitimate interests (Article 7(IX)): For security, fraud prevention, and service improvement, balanced against your rights.
• Exercise of rights (Article 7(VI)): When processing is necessary for us to respond to your rights request.

3. How we share your information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: With third-party providers who help us operate our Service — for example, hosting providers, email delivery services, and privacy-friendly analytics. These providers are bound by confidentiality obligations and may only process data on our instructions.
• Legal compliance: If required by law, court order, or government regulation, or to protect our rights, property, or safety and those of our users.
• Business transfer: In connection with a merger, acquisition, or sale of assets. We will notify you before your information is transferred under different terms.
• With your consent: We may share information with third parties when you have explicitly consented.

4. International data transfers

Crafzen and its service providers may process and store data in countries outside your country of residence. When we transfer personal data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or under the UK International Data Transfer Addendum where applicable. For transfers from Brazil, we rely on the mechanisms permitted under Article 33 of the LGPD.

5. Data security

We take reasonable technical and organisational measures to protect your information from unauthorised access, use, or disclosure. These measures include encryption in transit (TLS/SSL), access controls, and regular review of our systems. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact form submissions are retained for up to twenty-four (24) months. Analytics data is retained in aggregate form for up to twenty-six (26) months. You may request earlier deletion at any time (see Section 7).

7. Your choices and rights

7.1 GDPR rights (EEA, UK, Switzerland)

Under the EU GDPR and UK GDPR, you have the following rights:

• Right to access: Request a copy of your personal data.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data.
• Right to restrict processing: Request that we limit our processing of your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing.
• Right to lodge a complaint: With your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu. In the UK, the supervisory authority is the Information Commissioner's Office (ICO) at ico.org.uk.

7.2 LGPD rights (Brazil)

Under the LGPD, you have the following rights as a data subject:

• Right to confirmation and access: Confirm whether we process your data and access it.
• Right to correction: Request correction of incomplete, inaccurate, or outdated data.
• Right to anonymisation, blocking, or deletion: Request deletion or anonymisation of unnecessary or non-compliant data.
• Right to data portability: Request transfer of your data to another service or product provider.
• Right to deletion of consent-based data: Withdraw consent and request deletion of data processed under that consent.
• Right to information about sharing: Know which public and private entities we share data with.
• Right to information about refusal: Know the consequences of refusing access to data where consent is required.
• Right to revoke consent: Revoke consent at any time, without affecting the lawfulness of processing before revocation.
• Right to lodge a complaint: With the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

7.3 CCPA / CPRA rights (California, USA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect.
• Delete: Request deletion of personal information we collected from you.
• Opt out of sale or sharing: We do not sell personal information. You may opt out of "sharing" (cross-context behavioural advertising) at any time.
• Non-discrimination: We will not discriminate against you for exercising your rights.

7.4 How to exercise your rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days. If we need more time, we will inform you of the reason and extension period within the first thirty (30) days.

If you are a California resident, you may submit a "Do Not Sell or Share My Personal Information" request even though we do not sell data — simply email us and we will confirm.

8. Personalised advertising and opt-out

If we display third-party advertising on Crafzen (such as through Google AdSense or similar partners), these partners may use cookies to serve ads based on your prior visits to this and other websites. The use of advertising cookies enables the partner to display ads that may be of interest to you based on your browsing profile.

You can opt out of personalised advertising using the following links:

• Google personalised ads opt-out: myadcenter.google.com/personalizationoff
• Google partner sites policy: policies.google.com/technologies/partner-sites
• Digital Advertising Alliance (DAA): optout.aboutads.info
• Network Advertising Initiative (NAI): optout.networkadvertising.org

You can also disable cookies in your browser settings. Please note that opting out of personalised ads does not mean you will see fewer ads — you may still see generic, non-personalised ads.

9. Children's privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under this age without parental consent. If you believe we have collected information from a child under 13, please contact us immediately at [email protected] and we will take steps to delete such information.

For users subject to the UK Age Appropriate Design Code, we do not process children's data in a manner that is detrimental to their best interests, and we do not use profiling or nudge techniques on users we know to be under 18.

10. Third-party links

Our Service may contain links to third-party websites or services whose privacy practices differ from ours. Some article images and links are provided by external websites; their own privacy policies apply when you visit them. Crafzen does not control third-party services or guarantee their continued availability. We encourage you to read the privacy policies of any third-party site you visit.

11. Applicable regulations

This Privacy Policy is designed to comply with the following data protection regulations:

• EU GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation) — applicable to users in the European Economic Area, United Kingdom, and Switzerland.
• UK GDPR and DPA 2018: The United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
• Brazil LGPD: Lei Geral de Proteção de Dados, Law No. 13.709/2018 — applicable to users in Brazil.
• California CCPA / CPRA: California Consumer Privacy Act and California Privacy Rights Act — applicable to California, USA residents.
• COPPA: Children's Online Privacy Protection Act — applicable to users under 13 in the USA.
• PIPEDA: Personal Information Protection and Electronic Documents Act — applicable to users in Canada.
• APP: Australian Privacy Principles — applicable to users in Australia.
• APPI: Act on the Protection of Personal Information — applicable to users in Japan.

12. Changes to this policy

We may update this Privacy Policy as our Service evolves or as laws change. We will post changes on this page and update the "Last updated" date at the top. If we make material changes — such as changes to the types of data we collect or how we use them — we will provide a more prominent notice (such as a banner on the homepage). Your continued use of the Service after changes become effective means you accept the new policy.

It is your responsibility to review this page periodically for updates.

13. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Email: [email protected]
• Website: crafzen.top
• Contact page: crafzen.top/contact

Crafzen is a remote project and does not maintain a public walk-in office. Please use email or our contact page for all privacy-related enquiries. We aim to respond within five (5) business days.