Privacy Policy

Information We Collect

We collect only the minimum information necessary to provide our service:

• Sign-in credentials (email & password, GitHub, Google, or phone number) - Used to uniquely identify and authenticate your account
• Email Address - Used for account communication and login
• Profile Info (name, avatar) - Used to display your identity on the platform
• Phone number - Collected when you sign in via SMS verification code, used for identity verification
• Login IP address - Used for security and abuse prevention

Why We Collect This Information

The sole purpose of collecting this information is to:

• Authenticate your identity and allow you to log in
• Prevent abuse and unauthorized access to the platform
• Display your basic profile information within the platform

What We Do NOT Collect

• We do not store plaintext passwords - your password is stored only as a salted hash (bcrypt) and cannot be recovered
• We do not collect sensitive personal data (ID numbers, financial info, etc.)
• We do not track your browsing history outside our platform
• We do not sell your personal information. To provide the Service, we share only the minimum necessary data with trusted processors (cloud hosting, email delivery, SMS, and bot-defense services), each bound by confidentiality obligations

Data Storage & Security

Your data is stored securely and protected using industry-standard practices. We retain your data only as long as your account is active or as needed to provide our services.

Your Rights

You can request to:

• View the personal data we hold about you
• Request deletion of your account and associated data (a 14-day grace period applies after submission; you may cancel during this window, after which data is permanently removed)
• Revoke third-party login access (Google / GitHub) at any time via the respective account settings

Contact Us

If you have questions about this Privacy Policy, please contact us at: craftvo@163.com