Privacy Policy

• Account information — your email address and, if you set one, a display username, created when you sign up.
• Question content — the questions, text, images, and links you submit to generate a report, and the report we return.
• Payment information — handled by Stripe. We receive a customer ID, plan, and billing status; we do not receive or store your card number.
• Usage and device data — page views, referrers, approximate request timing, IP address (used in hashed form for anti-abuse and rate limiting), and standard log data.
• Support and feedback — messages you send us and thumbs up/down feedback on individual answers.

• Generate your reports and show your history in your account.
• Process payments and manage subscriptions.
• Send transactional email (sign-in links, receipts, occasional return reminders, and important account or security notices).
• Protect the Service — detect abuse of the free trial, enforce rate limits, and investigate suspected policy violations.
• Improve answer quality and product usability, using aggregated or de-identified data where possible.
• Meet legal, tax, and compliance obligations.

We share the minimum data needed with third-party providers that run the service on our behalf. Their handling of that data is governed by their own agreements and policies:

• Hosting and database — used to run the site and store your account and reports.
• AI providers — used to generate answers. Your prompt (and any images or links you attach) is sent to the AI provider so it can produce a response.
• Stripe — payment processing.
• Email delivery — used to send transactional email from CRACTT.
• Search engines / verification — Google Search Console and Bing Webmaster Tools verification tags are present in the site head.

We do not sell your personal information.

CRACTT uses cookies and local browser storage that are necessary for the service to work — for example, to keep you signed in, remember a pending question during sign-up, and hold checkout state. We also record basic first-party usage counts (page views) to understand how the site is used. We do not run third-party advertising trackers.

Account data, reports, and usage credits are retained for as long as your account is active. Server and payment logs may be retained for a reasonable period for security, fraud prevention, and legal compliance. If you delete your account, we delete or de-identify your account and report data within a reasonable timeframe, except where we are required to keep records (for example, tax and payment records).

• You can view and download your reports from your dashboard.
• You can cancel a subscription at any time in your account or through the Stripe customer portal.
• You can request deletion of your account and associated data by emailing us at the address below.
• Depending on where you live, you may have additional rights under GDPR, UK GDPR, the CCPA/CPRA, or similar laws — including the right to access, correct, delete, or receive a copy of your data, and the right to object to certain processing. Contact us to exercise those rights.

CRACTT is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use industry-standard practices — encryption in transit, access controls, and row-level security in our database — to help protect your data. No online service can guarantee perfect security; you use CRACTT at your own risk.

CRACTT is operated from the United States. If you access the service from another country, you understand and consent to the transfer of your information to the United States and other countries where our subprocessors operate.

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

Privacy questions or requests? Email mcbride32189@yahoo.com.