CrafterCMS

Privacy Policy Overview

1. Data Collection and Use

Crafter may collect the following information:

• Analytics data: With the user’s explicit permission, Crafter’s analytics tools may collect domain names and anonymized IP addresses, along with information about pages visited. Crafter says this is used only for aggregated statistics and not to identify individuals.
• Email address: If you opt into newsletters or other communications, Crafter uses your email to send requested newsletters, notifications, and other correspondence it considers useful.
• Training-course information:
• Email: Used to communicate order details, training dates, locations, and reminders.
• Phone number: Used only to address problems with the order.
• Credit-card information: Used to charge the order or process refunds. Crafter states it does not retain credit-card information for other purposes.
• Cookie and device information: Cookies may record browser or device identifiers, login status, preferences, use of Service features, and interactions with the website. This information may be used to:
• Operate secure and logged-in areas;
• Remember settings and preferences;
• Measure and improve website performance;
• Test new features;
• Provide more relevant content.

The policy describes four cookie categories: strictly necessary, performance, functionality, and targeting. Some cookie information may be anonymous, but the policy does not fully explain whether all cookie data is linked to accounts or other identifiers.

2. User Rights and Choices

The policy gives users these practical choices:

• Email opt-out: You may unsubscribe from future mailings at any time.
• Broader deletion request: You may request removal from all Crafter systems by emailing optout@craftercms.com.
• Cookie controls: You may delete or disable cookies through browser settings.

Disabling cookies may prevent parts of the Service from working properly. The policy does not clearly describe formal rights to access, correct, restrict, export, or object to processing, nor does it identify a data-protection officer or supervisory authority process. It also does not specify how deletion requests are verified or how long they take.

3. Sharing with Third Parties

Crafter states that it will not sell an opted-in email address to third parties.

However, the policy allows information from targeting cookies to be shared with outside organizations, including business partners, for aggregate usage statistics and analytics/testing. Third-party cookies may also be placed on your device by service providers helping Crafter understand Service usage.

The policy does not identify those third parties, describe international transfers, explain processor safeguards, or clearly distinguish aggregate information from information that could be linked to a particular user.

4. AI/ML Training

The policy does not mention artificial intelligence, machine learning, generative AI, or model training. Therefore, it does not expressly authorize or prohibit using user data to train AI models. Users should not assume that data is excluded from AI training based solely on this policy; clarification from Crafter may be appropriate, particularly regarding analytics, support, or submitted content.

5. Key User Obligations and Restrictions

The policy imposes few direct obligations. Users should:

• Provide accurate information when registering for training or placing an order;
• Understand that opting into email communications may result in additional correspondence Crafter considers useful;
• Manage cookies through their browser if desired;
• Recognize that disabling cookies may impair functionality.

There are no detailed restrictions on submitting sensitive information, and the policy does not explain whether users should avoid providing such information.

6. Liability and Disputes

This document contains no stated liability disclaimer, warranty limitation, governing-law clause, arbitration requirement, class-action waiver, or dispute-resolution procedure. It also does not explain responsibility for data breaches, third-party cookie activity, or unauthorized access. These issues may be addressed elsewhere in Crafter’s terms of service or contractual agreements.

7. Policy Changes

The document does not explain:

• How users will be notified of privacy-policy changes;
• Whether changes apply immediately or only prospectively;
• Whether continued use constitutes acceptance;
• When the policy was last updated.

This is a significant omission because users may have no clear notice of changes to data practices.