Privacy Policy

Draft. This policy has not been reviewed by a lawyer and does not yet name a legal entity. The factual claims about what we collect and who we share it with reflect the current build.

Who we are

Blog Craftly is a tool for generating and reviewing blog drafts. For any privacy question, or to exercise the rights described below, contact us at [email protected].

What we collect

Account data - your email address and authentication details, so you can sign in and we can associate your drafts with your account.

Content you create - the prompts, drafts, and profiles you generate or save, stored so the product can show them back to you. We do not use your content to train models.

Billing data - handled by our payment processor. We store subscription status, not card numbers.

Analytics data - only if you accept analytics cookies. See below.

Diagnostic data - when something breaks, our error monitoring provider receives the error, your IP address, and browser details, plus a masked replay of the session. See Error monitoring and session replay below.

Cookies

Essential cookies keep you signed in, remember your theme preference, and record your answer to the cookie banner. These are required for the site to function and are set without consent, as permitted.

Analytics cookies come from Google Analytics 4 (property G-9MBH9VVTMW) and help us understand which pages people use. They are disabled by default and are only set after you press Accept on the cookie banner. If you reject, Google Consent Mode keeps analytics storage denied and no analytics cookie is written.

If you accept analytics cookies, we also load Microsoft Clarity, which records how sessions unfold - clicks, scrolling, and page content - as session replays and heatmaps that help us improve the product. Clarity sets its own cookies and receives your IP address and browser details. It is never loaded before you accept, and never loaded at all if you reject.

The full inventory - every cookie and storage key, what sets it, and how long it lasts - is on the Cookie Policy page. To change your decision, clear this site's data in your browser - the banner will appear again on your next visit.

Error monitoring and session replay

We use Sentry to detect crashes and diagnose bugs. Alongside error reports, Sentry records a replay of about 1 in 10 sessions, and of any session in which an error occurs.

Replays are captured with all text masked and all media blocked - the prompts you write and the drafts you generate are not transmitted. What is captured is page structure and interaction timing, along with your IP address and browser details.

This runs on the basis of our legitimate interest in keeping the service working, and is currently active regardless of your analytics cookie choice. If you object to it, email [email protected].

Third-party fonts

Our typefaces are served from Google Fonts, so your browser requests them from Google and Google receives your IP address when a page loads. No cookie is set by that request.

Processors we share data with

We rely on third parties to run the service. Each processes data only as needed to provide their part of it:

• A hosting, database, and authentication provider (Supabase).
• AI model providers, which receive your prompts in order to generate drafts.
• An email delivery provider, for account and notification email.
• A payment processor, for subscriptions and invoices.
• An error monitoring provider (Sentry), as described above.
• Google Analytics - subject to your consent.
• Microsoft Clarity (session replays and heatmaps) - subject to your consent.
• Google Fonts, as described above.

How long we keep it

Account and content data is kept for as long as your account exists. Delete your account and we remove it, except where we are required to retain records (for example, billing records for tax purposes).

Our newsletter is separate from your account. You can subscribe to it without one, so deleting your account does not unsubscribe you. To leave the newsletter, use the unsubscribe link in any newsletter email - you can do that whether or not you still have an account.

Your rights

If you are in the UK or EU you have the right to access, correct, delete, restrict, and port your personal data, and to object to processing. You may also withdraw analytics consent at any time - see Cookies above. To make a request, email [email protected]. You also have the right to complain to your local data protection authority.

Changes

If we make material changes to this policy we will update the date above and, where required, ask for your consent again.