Privacy policy

Who is responsible

CRAFT AI is published by PENRA, a sole proprietorship (micro-entreprise, entreprise individuelle). PENRA is responsible for the personal data described on this page.

To ask a question or to use your rights, write to palafonda67@gmail.com.

In short

• No advertising trackers, no analytics and no cookies.
• An account is needed to buy a licence, not to play: the mod only needs its licence key.
• Payments are handled by Polar. This website never sees or stores any card data.
• Your requests and your builds never go through a CRAFT AI server.

What we keep

If you create an account

• Your e-mail address and your password. The password is hashed by our authentication provider (Supabase): we cannot read it.
• The list of your licences and of the devices that use them (a label such as “macOS · aarch64”, the mod version and the date of the last check).

If you sign in with Google

Google gives us your e-mail address and your basic profile information (your name and the address of your profile picture) through the scopes openid, userinfo.email and userinfo.profile, and nothing else. We use your e-mail address to identify your account. We do not use the rest, and we do not access any other data of your Google account.

If you buy a licence

Polar, which processes the payment, tells us the order, the e-mail address of the buyer and the amount paid. We keep them with the licence, to issue it, to give you its key on your account page and to revoke it if the order is refunded. We never see or store your card number.

When you go to pay, we give Polar your e-mail address (to fill the form in for you), the language of the page and a reference to your account: a code, signed by us, that Polar sends back with the order so that the licence goes to your account.

When the mod checks your licence

The mod sends the licence key, a random device identifier (the server only stores a hash of it), a device label made of your operating system and your processor architecture, and the mod version. As with any request, the server also sees your IP address. The IP address of an attempt with a wrong key or with an unknown purchase identifier is only used to slow down guessing: such entries older than one day are deleted by the routine clean-up of the service.

What stays on your computer

Your Minecraft worlds, your requests and your builds are not sent to us. They stay between the game and your own Claude Code, under the terms of your Claude account.

Hosting logs

Our hosting provider (Vercel) keeps technical logs of the requests made to the website, such as the IP address, the date and the page requested, to operate and secure the service. We do not use them for analytics.

Why we use your data

• To provide the account and the licence you asked for (performance of a contract).
• To keep the service secure and to prevent abuse such as key guessing (our legitimate interest).
• To meet legal obligations. Accounting for payments is handled by Polar, as merchant of record.

Cookies and local storage

This website sets no cookies. The account page keeps your sign-in in the local storage of your browser until you sign out, and the website remembers the language you chose in the same way. Nothing is shared with third parties.

Who else handles your data

We rely on the following providers, which act on our behalf. Each one only receives what its role requires.

• Vercel: hosting of the website and of its server functions.
• Supabase: accounts and licence database (the project is hosted in the European Union).
• Polar: payment, as merchant of record. The privacy policy of Polar applies to the payment.
• Google: sign-in, only if you choose “Continue with Google”.

Some of these providers may process data outside the European Economic Area. They then rely on the safeguards that the GDPR requires, such as standard contractual clauses.

How long we keep it

• Account and licence data: as long as your account or your licence exists.
• If you ask us to delete your account, the account is deleted and your licences are unlinked from it. We keep the minimal record of a purchase (order, e-mail address, licence) for as long as the licence exists, to honour it and to handle refunds.
• Payment records: kept by Polar, according to its own legal obligations.

Your rights

Under the GDPR you can ask for access to your data, for its correction or its deletion, for the restriction of its use and for a copy of it in a usable format, and you can object to its use. Write to palafonda67@gmail.com: we answer within one month. We may ask you to confirm that the account or the licence concerned is yours.

If you think your rights are not respected, you can complain to the CNIL (cnil.fr) or to the data protection authority of your country.

Changes

We may update this page. The date at the top shows the latest version. The rules of use are in the Terms of use.