Privacy policy
Crux (crux.supercraft.host) is operated by Supercraft. The canonical Supercraft privacy policy at supercraft.host/privacy covers all Supercraft products including Crux. This page summarises the Crux-specific handling.
What we collect
- Account data. Email, display name, and hashed password when you sign up. OAuth identifiers (GitHub, Discord, Google) if you use social login.
- Usage data. API call volume, project metadata, and service logs (IP, user agent, timestamps) for billing, rate limiting, and abuse prevention.
- Billing data. If you upgrade to a paid plan, payment is handled by our PCI-compliant payment provider. We store plan level and invoice history, not card data.
- Player data. Data that your game stores in Crux on behalf of end players is processed by us as a data processor on your behalf. You are the controller.
Cookies and analytics
We use a session cookie to keep you signed in and a CSRF token for authenticated requests. We use Statcounter for aggregate traffic analytics. We use advertising measurement services, including Google Ads, to understand paid-traffic conversions. For audience matching and acquisition exclusions, we may normalize and one-way hash account email addresses before securely sharing those hashes with an advertising provider. This helps us avoid advertising signup offers to existing account holders and evaluate campaign quality. No personally identifying profile data is sold to third parties.
Your rights
You can request access, correction, export, or deletion of your account data at any time by emailing contact@supercraft.host. Deleting your account also removes the player data you stored on our platform; please export anything you need first.
Contact
Questions about this policy: contact@supercraft.host.
Full canonical policy: supercraft.host/privacy.