Privacy Policy

Crafter's Lab is a private membership workshop operated by Crafter Apps. This policy explains what information the Lab processes, why it is needed, and the choices available to members and visitors.

Information we process

• Account identity from Google sign-in, including your user ID, email, name, and profile image.
• Profile and preference data, including display name, avatar, and explicit newsletter preference.
• Membership and billing status, Stripe customer/subscription references, tier, dates, and payment lifecycle information. Crafter's Lab does not store full card details.
• Slack identity, workspace-link status, channel access outcomes, and Crew Log content synced from supported Slack conversations.
• Notion invitation and teamspace handoff status for eligible membership tiers.
• Resource activity such as watched items, likes, downloads, discussions, replies, and reactions.
• Files you choose to upload, such as a profile avatar.
• Operational information such as request metadata, security/rate-limit events, error reports, and email delivery status.

How we use information

• Authenticate accounts and keep sessions secure.
• Provide the correct membership, resource, Slack, and Notion access.
• Process subscriptions, cancellations, upgrades, failed payments, and customer-portal requests.
• Operate Crew Log and the supported Slack-to-dashboard discussion flows.
• Send transactional messages such as membership, billing, onboarding, and service emails.
• Store your newsletter preference. Newsletter delivery is not currently live, and payment does not opt you in.
• Prevent abuse, diagnose failures, protect Firebase costs, and maintain service reliability.

Service providers and data sharing

Crafter's Lab does not sell personal information or use it for third-party advertising. Information is shared only as needed with providers that operate the service: Google and Firebase for authentication, database, Functions, and storage; Stripe for payments; Slack for the community workspace; Notion for eligible workspace handoffs and internal member mirrors; Resend for transactional email; Netlify for web hosting and delivery; Sentry for configured error/performance monitoring; and YouTube when embedded videos are viewed. These providers may process information under their own privacy terms.

Cookies and browser storage

The site uses an HTTP-only session cookie, Firebase authentication storage, and limited local/session browser storage for security, preferences, short-lived caches, onboarding state, and checkout recovery. Crafter's Lab does not run advertising cookies or session-replay monitoring. Embedded services such as Google, Stripe, Slack, or YouTube may set their own storage when you use those features.

Retention and deletion

Account and membership information is retained while needed to provide the service. Some billing, security, webhook, and operational records may be retained longer where required for legal obligations, fraud prevention, dispute handling, or reliable idempotent processing. Slack, Stripe, Notion, and other providers retain information according to their own policies. A deletion request may require identity verification and may not remove records that must legally or operationally be retained.

International processing

The providers used by Crafter's Lab may process information in countries other than your own. Their contractual and legal transfer safeguards apply to that processing.

Your choices and rights

• Update profile information and your newsletter preference from Profile.
• Manage or cancel a paid subscription through the Stripe customer portal.
• Request access to, correction of, or deletion of personal information.
• Withdraw newsletter consent at any time without affecting membership access.
• Ask about objection, restriction, or portability rights that may apply in your jurisdiction.

Security

Crafter's Lab uses access controls, signed webhooks, protected server-side secrets, scoped Firebase rules, rate limits, and monitoring to protect member data. No internet service can guarantee absolute security; please report suspected account or data issues promptly.

Policy updates and contact

This policy will be updated when material data practices or providers change. For a privacy question or request, email developer@crafterapps.com.