Ing. Michal Kasal, Czech Republic (hereinafter “we” or “us”), as the controller of personal data, informs you as a visitor to acrafto.com and a user of the Acrafto app from the Microsoft Store about the processing of personal data described below and about our privacy practices.
Protecting your personal data matters to us. Acrafto is built to know as little about you as possible: every tool runs directly in your browser, and nothing you enter into it is sent to us. In particular, this Privacy Policy explains:
- what personal data we process — and what we do not,
- for what purposes and on what legal basis we process it,
- who your personal data may be shared with,
- how long we keep it,
- what rights you have regarding your personal data.
If you would like any part of this text explained, you can contact us at any time at privacy@acrafto.com.
Scope of processing
The data we process depends on how you use the site.
- When you visit the website (acrafto.com):
- technical request data in the hosting logs — IP address, time, requested URL and user agent.
- When you use the tools:
- none — your inputs, files, images and results are never sent to us (see The tools run on your device).
- When you contact us:
- email address and name (if you provide it),
- the content of your message.
- When you use the app from the Microsoft Store:
- the same as when visiting the website; installation data is processed by Microsoft (see Microsoft Store).
The tools run on your device
Every tool on Acrafto is JavaScript that runs directly in your browser. Text you type, files you open, images you edit and passwords you generate are never sent anywhere. The site consists of static files and has no server that could receive your input — so we neither store nor process any of it. Closing the tab clears whatever you were working on.
Some tools put their configuration in the address bar so you can share a link (for
example a QR code setup). The part of the address after the # is never sent
to the server by the browser.
Cookies and local storage
Our website and app do not use cookies and contain no analytics, tracking or advertising scripts.
The site uses localStorage — storage that stays in your browser and is never transmitted — solely to remember choices you made yourself:
| What is stored | Key |
|---|---|
| Light or dark theme | theme |
| Color picker: recent colors, palette output format | cw_history_v1, cw_palfmt_v1 |
| Watermark tool: saved setting profiles (settings only, never your images) | acrafto:watermark:profiles |
| Password generator: last used settings, saved profiles, and whether the session history panel is switched on | acrafto-pwd-last, acrafto-pwd-profiles, acrafto-pwd-history |
| QR generator: history of generated codes, including their content and preview | acrafto-qr-history |
| Randomizer: draw history and saved presets | acrafto.random.history.v1, acrafto.random.presets.v1 |
Generated passwords are never written to storage; the password history panel exists in memory only and disappears when you close the tab. Your language choice is not stored.
You can delete this data at any time by clearing site data for acrafto.com in your browser settings. The tools keep working and simply start from their defaults. The site also registers a service worker that caches copies of the site's own pages and files for offline use — not your data.
Purpose and legal basis of processing
We process technical data in the hosting logs on the basis of our legitimate interest in ensuring the proper operation and security of the website — in particular to deliver pages, protect against abuse and attacks, and fix errors. We do not use it to profile visitors or for marketing.
If you contact us by email, we process your personal data to handle your enquiry, on the basis of our legitimate interest.
We do not process data stored in localStorage — it stays on your device and we have no access to it.
Right to object
All processing described in this policy is based on our legitimate interest. You have the right to object to such processing at any time on grounds relating to your particular situation. Send your objection to privacy@acrafto.com. Unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims, we will no longer process your personal data.
Who has access to your personal data
In operating the website, your personal data may be processed on our behalf by processors or obtained by third-party service providers. These are exclusively:
- the hosting provider,
- the app store operator, if you install the app from the Microsoft Store.
Google Firebase Hosting
The website is hosted on Google's Firebase Hosting. Acting as our processor, Google processes technical request data (IP address, time, requested URL, user agent). For more information, see the Firebase privacy information.
Microsoft Store
The Acrafto app in the Microsoft Store is this same website packaged for Windows. It runs the same code, stores the same data on your device and adds no telemetry of its own. The Store itself may collect data about installation and use of the app as an independent controller under its own terms. We have no influence over this data and see only aggregate statistics. For more information, see the Microsoft Privacy Statement.
Transfers of personal data outside the EU
Google and Microsoft may also process personal data outside the European Union, mainly in the United States. In such cases the transfer is based on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
Retention period
Technical data in the hosting logs is kept for a few months and then deleted. We keep email correspondence for as long as necessary to handle your enquiry and any follow-up communication.
We will always tell you the exact retention period of your personal data if you contact us at privacy@acrafto.com.
Your rights
With regard to our processing of your personal data, you have the following rights:
- the right of access to your personal data,
- the right to rectification,
- the right to erasure,
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing,
- the right to lodge a complaint about the processing of your personal data.
In practice, the only personal data about you that may exist is the technical data in the hosting logs and the content of emails you send us yourself. Data the tools keep in localStorage stays on your device and we have no access to it.
If you have comments or complaints regarding the protection of your personal data, please contact us at privacy@acrafto.com. We will respond within one month.
Our activities are supervised by the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), with which you can lodge a complaint if you are not satisfied (www.uoou.gov.cz). You may also contact the supervisory authority in your own EU member state.
Security incidents
We take appropriate technical and organisational measures to prevent security breaches. Because we hold no account or contact details for you, if a security incident occurs that could put your rights and freedoms at risk, we will publish information about it on this page without undue delay. If the incident concerns email correspondence we have with you, we will also inform you by email.
Changes to this policy
This Privacy Policy may change from time to time. We will not restrict your rights under this policy without your explicit consent. All changes will be published on this page.
In the event of any discrepancy between language versions of this policy, the Czech version prevails.
Ing. Michal Kasal
Czech Republic
privacy@acrafto.com