Privacy at CRFTBY
Updated October 21, 2026.
What we collect
Contact, event and removal forms collect your email, name, listing link and message. Joining CRFTBY or the newsletter stores your email, optional first name, the ZIP code or city you give us (converted to an approximate town-level location), your travel distance, the crafts you pick, and your consent, confirmation and subscription status. We use your area only to show and send listings near you.
Saves and your membership
When you tap ♡, visitors’ saves stay in this browser’s storage on your device (up to 10). Members’ saves are stored with their CRFTBY membership so they appear on every device, and we use them to send a reminder before a saved fair or class and to show new work from makers you follow. Joining sets a secure sign-in cookie (crftby_member) on your device for up to a year. “Sign out on this device” removes it.
Your area on this device
When you set your area, we save it in a small first-party cookie (crftby_area) on your device for up to a year so Workshops and Out & About open near you. It holds your town, ZIP if you gave one, approximate coordinates and distance; it is not used for advertising. We don’t ask for your device’s precise location. Use “Forget my area” on the area page to remove it. Administrator sign-in uses email and a session cookie. Public forms use an hourly, hashed network identifier to limit abuse.
Why and where
We use requests to administer the directory and respond to corrections. Website data and uploaded images are hosted with Cloudflare. Only the administrator can access submitted requests. We do not sell newsletter or contact information. Newsletter delivery uses Resend when configured. Email addresses and newsletter content are shared with that provider to deliver the letter. We record delivery failures and suppress bounced or complained-about addresses. We do not track opens or clicks in our newsletter code. Joining does not create a maker account.
Your choices
Use Contact to ask to access, correct or delete your submitted information or leave the newsletter. Each email includes an unsubscribe link. We review deletion requests manually. Do not include payment details, passwords or sensitive personal information.
Retention and external links
Requests remain in the administrator’s inbox until deleted. Subscription and delivery records remain to manage your preferences and prevent unwanted sends; contact us to request deletion. Account records remain while an account is active. We use Cloudflare Web Analytics to measure page visits and performance without advertising cookies. Our current configuration excludes collection for visitors in the European Union. Cloudflare may also process operational logs to deliver and protect the service. Linked shops, booking sites, maps and social platforms apply their own privacy practices after you leave CRFTBY.