Privacy Policy

1. Overview

The Crafty Rabbit ("we," "us," or "our"), operating in Greenville County, South Carolina, respects your privacy. We collect only the minimum information required to authenticate your account, verify your membership tier, and save your custom workshop label vaults across your devices.

2. Information We Collect

• Account & Authentication Data (Supabase & Google OAuth): When you sign in using Google OAuth ("Continue with Google") or an Email Magic Link, our authentication provider (Supabase) receives your email address and basic authentication identifier to create and secure your profile.
• Membership & Vault Data: We store your membership switches (Hobbyist Pass status, expiration date, Certified Pro upgrade status, and license key) and your saved custom label configurations in your browser's localStorage and, when signed in, in our Row-Level-Secured Supabase database.
• Payment Processing (Stripe): All checkout transactions are handled directly by Stripe, Inc. We never view, collect, or store your full credit card number or CVV on our servers.

3. How We Use Your Information

We use your information strictly to: (a) authenticate your session and sync your saved shop labels across devices; (b) unlock your purchased Hobbyist Pass and Certified Pro features; (c) send transactional login links or customer support replies from workshop@thecraftyrabbit.com; and (d) comply with applicable legal and tax obligations. We never sell or rent your personal data or email address to third-party marketers.

4. Data Storage, Security & Account Deletion

Your cloud profile is protected by PostgreSQL Row Level Security (RLS) via Supabase so that only your authenticated session can read or update your profile row. You may clear your local browser vault at any time from inside the Customer Profile modal, or request complete deletion of your cloud account by emailing workshop@thecraftyrabbit.com.