Privacy Policy

• Account details: your name, email, phone number (optional) and business name. Your password is stored only as a secure hash — not even we can read it.
• Google sign-in: if you choose “Continue with Google”, Google gives us your name, email and profile picture. We never see your Google password, Gmail, Drive or anything else.
• Your website: the text, images, videos, products, blog posts and settings you add in the editor.
• Your visitors' messages and orders: when someone fills in a contact form or orders from your website, we keep what they send so you can see it in your dashboard.
• Basic technical data: IP address, browser and device type, used to keep the service secure and working.

• To create your account and sign you in safely, including the one-time codes we email you.
• To save, host and publish your website.
• To show you the messages and orders your website receives.
• To send important service emails: sign-up codes, password resets and new-message alerts.
• To stop abuse, fix problems and make the service better.
• To see which of our Facebook ads bring people to owncraft.net (see Cookies below).

We do not sell your personal information and we do not show you ads.

A few trusted companies run parts of the service for us. They get only what they need to do their job:

• Cloudflare: delivers websites quickly and securely and stores your files.
• Amazon Web Services (SES): sends our emails.
• Google: handles “Continue with Google”.
• Meta (Facebook): measures visits and sign-ups from our ads on owncraft.net through the Meta Pixel.
• Our hosting and database providers: store your account and website.

We share information with authorities only when the law requires it.

Each business decides what its website asks for. When you message or order from a business, that business is responsible for your information and OwnCraft stores it for them. Please contact the business first; you are also welcome to contact us.

We keep your information while your account is active. When you delete your website or account, we delete its data within 30 days, except records the law requires us to keep (such as order records).

• See and change your details any time in your dashboard settings.
• Ask us for a copy of your data, or to correct or delete it.
• Remove our access to your Google account at myaccount.google.com/permissions

We use a little browser storage to keep you signed in and remember your language.

On owncraft.net itself we use the Meta Pixel to measure our Facebook ads — for example, how many people sign up after seeing an ad. Meta may use cookies for this. It is never added to the websites you publish, so your visitors are not tracked by us. You can control ad tracking at www.facebook.com/adpreferences

All connections use HTTPS, passwords are hashed, and only the people who need to run the service can access data. No system is perfect, so please use a strong password and never share your sign-in codes.

OwnCraft is made for businesses and is not meant for children under 13.

If we change this policy we will update the date at the top, and email you about important changes.