1. Introduction

OrsonCraft ("we," "our," or "us") operates the website located at https://orsoncraft.com/. We are deeply committed to respecting and protecting the privacy of creators and visitors. This Privacy Policy details our practices concerning information collection, use, disclosure, and protection when you access our tools, educational guides, and services.

This document complies with international data privacy frameworks, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and requirements set forth by Google AdSense and third-party advertising partners.

2. What Information We Do NOT Collect

Unlike conventional cloud-based converter utilities, we believe the safest way to safeguard creator data is never to possess it. Specifically:

• No File Uploads: When you select or drag and drop a file into any tool workspace (e.g. YouTube Thumbnail Resizer, Image Compressor, Audio Trimmer, or Instagram Crop Tool), the file is read purely in your browser's local memory (RAM) via standard W3C File and FileReader APIs.
• No Account Profiling: You do not need to register, submit an email address, or create a password to use any of our standard browser tools.
• No File Metadata Retention: We do not log image EXIF data, audio ID3 tags, or video codec attributes.

3. Information We Collect Automatically (Log Files & CDN Analytics)

Like most web platforms delivered across high-speed Content Delivery Networks (Cloudflare), our edge servers record standard, non-personally identifiable log information when your browser requests web pages, stylesheets, scripts, and static assets. This technical telemetry includes:

• Internet Protocol (IP) addresses (anonymized/truncated where required by regional regulations)
• Browser engine and version (e.g., Chrome, Safari, Firefox, Edge)
• Operating system (e.g., macOS, Windows, iOS, Android, Linux)
• Referring and exit URLs and pages
• Date, timestamp, and HTTP status codes
• Aggregated request volume and bandwidth usage to detect distributed denial-of-service (DDoS) attacks

These logs are utilized strictly for server diagnostics, routing traffic efficiently, preventing malicious bot activity, and maintaining uptime.

4. Information You Voluntarily Provide

The only instances in which we collect personal contact details are when you voluntarily communicate with us:

• Customer Support & Contact: When you complete our contact form or email support@orsoncraft.com, we collect your name, email address, and message contents solely to respond to your inquiry.
• Pro Waitlist: If you submit your email address to join the upcoming OrsonCraft Pro waitlist, we store your email address solely to notify you when advanced batch tools become available. You may unsubscribe or request deletion at any time.

5. Cookies and Web Beacons

A cookie is a small text file placed on your device by a web browser. OrsonCraft utilizes minimal cookies categorized as follows:

• Strictly Necessary / Functional: We may use browser localStorage or session storage to preserve your client-side UI preferences (such as dark theme settings or recent tool options). These do not track you across external domains.
• Performance & Analytics: Aggregated, privacy-respecting analytics may measure which tool pages are most popular to guide our engineering roadmap.
• Advertising Cookies: Third-party advertising partners (Google AdSense) may set cookies to serve ads based on your prior visits to this or other websites.

For detailed control instructions and cookie categories, please review our dedicated Cookie Policy.

6. Google AdSense & Third-Party Advertising Disclosures

To keep our creator tools 100% free forever without subscriptions or watermarks, OrsonCraft displays advertisements served by Google and authorized third-party vendors.

• Google, as a third-party vendor, uses cookies to serve ads on OrsonCraft.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to OrsonCraft and/or other sites on the Internet.
• Users in the European Economic Area (EEA), United Kingdom, and California are presented with a consent management mechanism allowing the rejection or configuration of personalized advertising.
• You may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor cookie usage for personalized advertising by visiting www.aboutads.info/choices/ or youradchoices.com.

7. Affiliate Partner Links Disclosure

OrsonCraft may feature affiliate links to creator software, music distribution services (such as DistroKid or CD Baby), audio hardware, or web hosting. If you click on an affiliate partner link and complete a purchase, we may receive a commission at no additional cost to you.

These partnerships never compromise our editorial reviews, tool benchmarking, or privacy architecture. For full details, see our Affiliate Disclosure.

8. Your Rights Under GDPR (EEA and UK Residents)

If you reside within the European Economic Area or the United Kingdom, you possess statutory rights under Regulation (EU) 2016/679:

• Right of Access: You may request a copy of any personal data we hold about you (e.g. support emails).
• Right to Rectification: You may request correction of inaccurate or incomplete contact data.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your support correspondence or waitlist subscription.
• Right to Restrict or Object to Processing: You may contest our lawful basis for processing or object to direct communications.
• Right to Data Portability: You may request transfer of your information to another organization in a machine-readable format.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any GDPR right, email our Data Privacy Officer at privacy@orsoncraft.com. We respond to verified requests within thirty (30) days.

9. Your Rights Under CCPA/CPRA (California Residents)

Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020:

• Right to Know & Access: You can request disclosure of the categories and specific pieces of personal information collected.
• Right to Delete: You can request deletion of personal information collected directly from you.
• Right to Opt-Out of Sale or Sharing: OrsonCraft does not sell or share personal information for monetary consideration. To the extent third-party ad tags may constitute "sharing" under California law, California residents can manage cookie preferences via our consent banner.
• Right to Non-Discrimination: We will never deny services, charge different prices, or provide degraded tool quality if you exercise your CCPA rights.

10. Children's Privacy (COPPA Compliance)

OrsonCraft is a general audience creator toolbox and does not knowingly solicit or collect personally identifiable information from children under the age of 13 (or 16 in certain European jurisdictions). If a parent or guardian discovers that their child has provided contact details to us, please notify us immediately at privacy@orsoncraft.com and we will promptly purge the information from our records.

11. Data Security & Hosting Infrastructure

While your creative files remain strictly on your local computer, our website infrastructure uses industry-standard Transport Layer Security (TLS 1.3) encryption for all web requests. We deploy strict Content Security Policies, modern HTTP headers (HSTS, nosniff, SAMEORIGIN), and rely on enterprise-grade Cloudflare edge security to prevent unauthorized access.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect emerging browser capabilities, legal obligations, or new tool additions. Any amendments will be reflected on this page with an updated "Last Updated" timestamp. We encourage creators to review this policy periodically.

13. Contact Information

If you have questions, feedback, or concerns regarding our privacy practices, or if you wish to exercise your data rights, please contact our team: