1. Data controller
The controller of the data collected on this site is Padcraft, a French sole proprietorship (micro-entreprise / auto-entrepreneur), SIRET 108 445 727 00010, Bernin, 38190, France. Contact: support@padcraft.shop.
2. Data collected
Depending on how the site is used, PADCRAFT may collect:
- Account data: email, first/last name, username, password (stored encrypted by Supabase Auth, never in plain text), profile picture (optional);
- Order data: purchase history, designs created, purchased, or published for sale (for creators);
- Limited service-usage data: important account events, products added to the cart, paywall consultations and Stripe Checkout lifecycle events (session created, redirect initiated, embedded form displayed, expired or failed), including the page, current plan and whether the visitor is signed in;
- Website interaction data collected through Microsoft Clarity, such as page views, clicks, scrolling, mouse movements, device and browser information. Sensitive form content is masked;
- Payment data, processed directly by Stripe; PADCRAFT never sees or stores full card numbers.
PADCRAFT uses these measurements to understand navigation, identify usability problems and improve the purchase and configuration experience. They are not used by PADCRAFT to build an advertising profile.
3. Purposes of processing
Data is used for: managing the user account, processing orders and paying creator commissions, improving the service, and, subject to the user's consent, sending marketing communications.
4. Legal basis
Depending on the case, processing is based on performance of the contract (account management, orders), consent (marketing communications, non-essential cookies) or legitimate interest (security, fraud prevention).
5. Retention period
Account data is kept for as long as your account is active. You can delete your account at any time from your profile page, which permanently erases your account and personal data (some records, such as past invoices, may be kept longer where accounting or tax law requires it).
6. Data recipients
Data is shared only with the technical providers required to operate the site, each limited to what it needs to perform its task:
- Supabase: database, authentication, and file storage (account data, purchases, avatars, published designs);
- Stripe: payment processing (Stripe handles and stores your card details directly; PADCRAFT never sees them);
- Resend: sends transactional emails (order confirmations, account emails);
- Discord: receives private operational notifications for important service events; no password, card number or complete private overlay link is included;
- Microsoft Clarity: provides aggregated usage analytics and session replays used to identify navigation and usability problems;
- Vercel: website hosting.
7. Transfers outside the European Union
Some of the providers listed in Section 6 may process data outside the European Union depending on their own infrastructure. Where this is the case, they are required to provide adequate safeguards (such as the European Commission's Standard Contractual Clauses).
8. Cookies
The site stores a few items in the browser to remember the theme preference, cart contents and dismissed notices. A random session-only identifier is also stored in session storage to avoid counting the same paywall repeatedly during one browsing session. Microsoft Clarity may use first- and third-party analytics cookies to connect page views and produce aggregated statistics or session replays; where consent is required and has not been granted, Clarity operates without persistent analytics cookies and its reporting is limited.
9. Your rights
Under the GDPR, you have the right to access, rectify, erase, port, restrict and object to the processing of your personal data. You can exercise these rights by writing to support@padcraft.shop. You also have the right to lodge a complaint with your national data protection authority (in France, the CNIL, cnil.fr).
10. Security
PADCRAFT implements reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration.
11. Changes to this policy
This policy may be updated to reflect changes to the service or to regulations. The date of the last update appears at the top of this page.
12. Contact
For any question about this policy or your personal data: support@padcraft.shop.