Privacy Policy

Last updated: March 12, 2026

1. Information We Collect

When you sign in with Google, we receive:

• Profile information: your name, email address, and profile picture.
• Usage data: pages visited, analyses requested, and timestamps.
• Analytics data: anonymous usage statistics (page views, button clicks) collected via Plausible Analytics — a privacy-focused, cookie-free service that does not track you across sites.

If you subscribe to a paid plan, Stripe processes your payment. We store your Stripe customer ID and subscription status but never your card number or payment details.

2. How We Use Your Information

• Authenticate your account and manage your session.
• Track your analysis quota and subscription tier.
• Improve the service and fix bugs using privacy-focused analytics.
• Send transactional emails (e.g., subscription confirmations) — we will never send marketing emails without your consent.

3. Data Sharing

We do not sell your personal information. We share data only with:

• Google — for OAuth authentication.
• Stripe — for payment processing.
• Anthropic — game data (no personal info) is sent to generate AI analysis.
• Render.com — our hosting provider.
• Cloudflare — for DNS, CDN, and email routing.
• Plausible Analytics — anonymous, cookie-free usage analytics (no personal data shared).

4. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us at the email below.

5. Cookies

We use a session cookie to keep you logged in. We use Plausible Analytics, a privacy-focused, cookie-free analytics service, to understand site usage. We do not use third-party tracking cookies.

6. Security

We use HTTPS, CSRF protection, and secure session management. Passwords are never stored — authentication is handled entirely through Google OAuth.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us.

8. International Users

If you are in the European Economic Area (EEA), our legal basis for processing your data is: contract performance (providing the service), legitimate interest (analytics and security), and consent (where required). You have the right to access, rectify, erase, restrict processing, or port your data. Contact us to exercise these rights.

If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we have collected. We do not sell personal information.

9. Children's Privacy

Cradl is not intended for anyone under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

Questions about this policy? Email us at [email protected].