Privacy Policy

What we collect

• Your Google account basics: your name, email address and profile picture, which Google shares with us when you sign in. We don’t get your Google password.
• What you put in a wish: the recipient’s name, your name, your message, the photos you upload (with any titles, dates and captions you add) and any music you upload.
• Payment records: the amount, the date, whether the payment succeeded, the payment method type (for example UPI or card) and the PayU transaction reference. PayU handles the payment itself. We never receive your card number, UPI PIN or bank login.
• Technical data: sign-in session cookies, which keep you signed in. We also briefly use your IP address to stop abuse, such as too many uploads in a short time. We don’t use advertising trackers, and our visitor statistics don’t use cookies at all (see below).

How we use it

• To create, store and show your wishes, including to anyone you share the link with.
• To process payments and keep records of them.
• To email you about your account: a welcome email, receipts, your share link, and notices if a payment fails. These are service emails, not marketing.
• To answer you when you contact us, and to keep Craftpage secure.

Who can see your wish

Anyone with your wish’s link can see its contents, including the photos, message and names. Links are never listed publicly or indexed by search engines, but please share them only with people you trust.

Services we rely on

We share data only with the providers that run parts of Craftpage for us, and only what each one needs:

• Google: sign-in.
• PayU: payment processing.
• Cloudinary: storing and delivering your photos and music.
• Microsoft Azure: hosting the website and its database.
• Zoho: sending our emails.
• ipwho.is: turning an IP address into an approximate region for our visitor statistics.

Some of these providers may process data outside India. We may also share data if the law requires it.

Visitor statistics

We count visits to Craftpage ourselves, rather than using an advertising or analytics tracker, and this uses no cookies. We don’t store your IP address or your browser details. They are turned into a one-way code that is re-scrambled every day, so the counts can’t be traced back to you, and the same person on two days can’t be linked. We keep the page that was opened (wish links are counted together as a group, never individually), the site that linked you to us, and an approximate region such as a city or state, which ipwho.is works out from your IP address for us. These statistics are visible only to us.

How long we keep it

Wish links don’t expire, so we keep your wishes and account until you ask us to delete them. We keep payment records for as long as tax and accounting law requires, even after deletion.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us to see, correct or delete your personal data. You can also withdraw your consent, which means we delete your account and wishes. Email info@craftpage.app from the address you sign in with, and we’ll respond within 30 days. Deleting a wish permanently disables its link.

Children

Craftpage is meant for adults. Wishes are often for children, but accounts shouldn’t be created by anyone under 18 without a parent or guardian.

Security

We use encrypted connections (HTTPS) throughout, secure sign-in through Google, and trusted infrastructure providers. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects you.

Changes and contact

If we update this policy, we’ll change the date at the top of this page. Questions, requests or complaints (including as our grievance contact) can go to info@craftpage.app.