Privacy Policy

This privacy policy will give information on how CraftingStore, located at collects and processes personal data through our website ("our website", "this website"), and third party webstores ("webstore") that utilizes the CraftingStore donation platform.

This website is not intended for children and we do not knowingly collect data relating to children. We realize and understand that children and young people may visit this website, or otherwise interact with us and our commercial partners. It is our policy to encourage all minors to consult with their parents or legal guardian before submitting any content or information to us, our commercial partners or other third parties.

Section 1 - Controller

CraftingStore is the controller and responsible for your personal data, referred to as "CraftingStore", "us", "we", or "our" in this privacy policy.

Section 2 - The data we collect

We will describe any data that we collect that is deemed to be "personal data, or personal information". This means that this only includes data that can be used to identify you as a person. No data that is anonymized will be covered.

Section 3 - Information that we collect, and why


Description: The name that you entered when creating your account.

Reason: The username is used to address you on our platform, this may include messages on the dashboard, e-mails, or similar situations.

E-mail address

Description: The e-mail address that you enter when creating your account.

Reason: To allow you to log in to your account, and to send notifications about payment information, or account information. We will never share this information with any third party.


Description: The password that you entered when creating your account will be stored in a hashed form (we cannot "revert" it to your real password, nor can we see your real password.)

Reason: To allow you to log in to your account.

IP Address

Description: We store your IP address when you first create your account, and when you sign in again.

Reason: We store your IP address for security reasons, this includes our ability to verify ownership, or detecting abnormal activities on an account, done from another IP address.

Billing Information

Description: If you sign up for a `paid-for` plan, we are required by law to ask for, and store, billing information for creating the invoice. This includes; Country, VAT number, Phone number, State, Zip Code, City, Address, First legal name, Last legal name.

Reason: We are required by law to store this information for tax purposes.


We use a self-hosted matomo server for storing visitor counts on our website, it stores information like; Operation system, screen resolution, browser, your country, and the first few parts of the IP, no data is given to third parties. We only enable analytics tracking when cookies are accepted, and when the browser does not give us a "Do-not-track" request. We respect "do-not-track" requests.

Reason: We want to know about visit counts on our website, and where our visitors are coming from, we do not use this information for any other purpose. And we do not sell any of this information.

Section 4 - How is my data collected?

We use various methods to collect data;

Direct integration

We use a form or ask directly for information from you. This includes any form that you can fill in; Registration, Support requests, Billing information, etc.

Automated technologies

Our servers may log automated information, for example, any page that you visit. This information is logged to a server log that can be used for debugging purposes. We do not sell this data to any third party, and we will not use it to track you, these are just technical logs created by the software that we use to serve our platform.

Third-party integrations

We use various third-party integrations to monitor the performance of our platform and to assist you in using our platform. You can find more information about this in section 5.

Section 5 - Third-party integrations

We use various third-party services to provide you with our services, this section will describe the services that we use, and why we use them.


CloudFlare is a CDN (Content Delivery Network) and DDoS protection provider. A large chunk of the internet (about 30-40%) has CloudFlare in front of its website, including us. CloudFlare provides us with protection against network attacks. CloudFlare might use your information to determine a security score. For information about their policies, take a look at their website:


Wozzbot is the chatbot that is loaded on every page. The chatbot is loaded from our own website, it will only communicate to an external website when you click it. You can find more information on their website, take a look at

Section 6 - Third-party data sharing

We may share your information with various third parties, but only when required. We might share data with;

  • Providers used by us to provide you with our services, this includes, for example, payment providers that we use to process your payments (e.g. Stripe or PayPal).
  • Professional advisors inside the EEA, who provide us with consulting, banking, legal, insurance and accounting services. This includes lawyers, bankers, auditors, and insurers.
  • When we are required by law to share information, including, but not limited to, authorities acting as processors based in The Netherlands who require reporting.

Section 7 - Data Security

We have put in place the appropriate security measures to make sure that your data does not get lost, used, or accessed in an unauthorized way.

We limit access to your data to employees, agents, contractors and other third parties who have a business need to know. They will process data only when instructed by us, and they are subject to a duty of confidentiality.

To help us protect your data, you can do a few things, like making sure that your password is unique to only our website, and does not include public information, like your name.

Section 8 - Data retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We are required by tax law to keep basic information, including Contact, Identity, Financial and Transaction Data. We are required to keep this data for up to 10 (ten) years.

Section 9 - Your legal rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • The right to access – You have the right to request copies of your personal data.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions. You can request to remove your data from your profile.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You will not have to pay a fee to access your data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

If you make a request, we have one month to respond to you. It might take longer if the request is complex, we will keep you updated if this is the case. If you would like to exercise any of these rights, please contact us through the support center found at the dashboard, or at [email protected].