Privacy

Curated is run by the Craftwork team. This page says what we store about you, who else touches it and how to get it removed. Anything unclear goes to curated@craftwork.design.

What we store

Your account. Your email, the name you give us, a hashed password and the sessions that keep you signed in. Signing in with Google gives us your email, name and profile picture from Google, and nothing else.

What you save. Bookmarks, saved searches and the filters behind them.

What you send. Submitted websites with their URL, title, description, tags and screenshot. Briefs sent from the Studio page with the email, the contact handle and the text you write. Messages sent through the chat widget.

Email preferences. Whether you take the weekly email, and when that last changed.

How the site is used. Page views, clicks and the device and browser behind them, through analytics. We keep no advertising profiles and run no ad networks.

Payments never reach our servers. Card details go to Lemon Squeezy, which is the merchant of record for Pro, priority reviews, sponsorships and store purchases. We receive the fact that a payment happened, the product and the email attached to it.

Why we store it

To run your account and keep you signed in. To show you what you saved. To review the sites you send us and answer the briefs you write. To send transactional email, and the weekly one if you asked for it. To see which parts of the site get used, so the next change is an informed one. To meet accounting and legal obligations.

Who processes it

• Vercel, hosting and the servers that render these pages
• A managed PostgreSQL database, for accounts, bookmarks, submissions and sponsorships
• Bunny, screenshot storage and the image CDN
• Resend, transactional and weekly email
• Lemon Squeezy, payments, invoices and subscription state
• PostHog, product analytics
• Crisp, the chat widget
• Google, only if you sign in with a Google account
• Craftwork, the shared catalogue and the review queue behind Curated

Each of them gets the minimum the job needs. We do not sell personal data and we do not share it for anyone else’s marketing.

Cookies and local storage

A session cookie keeps you signed in. Analytics and the chat widget set their own cookies. Your theme choice and the note about the latest changelog live in your browser’s local storage and never leave it. Fonts are served from this domain, so no font network sees your visit.

Blocking analytics cookies leaves the site fully usable.

How long we keep it

Account data stays while the account exists. Delete the account and we remove it, apart from what accounting rules make us keep: payment records live for as long as tax law requires. Analytics events age out on the analytics provider’s retention schedule. Submitted sites that get published stay in the catalogue as entries, with the submitter’s email attached to them.

Your rights

Ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to a particular use. Bookmarks come out as a CSV from your dashboard whenever you want. Every marketing email carries an unsubscribe link, and unsubscribing stops the weekly send while leaving the transactional mail your account needs.

Write to curated@craftwork.design and we answer inside a month. If our answer disappoints you, your local data protection authority takes complaints.

Children

Curated is not built for anyone under 16, and we do not knowingly keep their data. Tell us if a child has signed up and the account goes.

Changes

This page changes when the site does. The date at the top says when it last moved, and a change that affects what we collect comes with an email to account holders.