Privacy policy

Looking for the Android game? Read the separate Block Breaker Privacy Policy. This page covers the CraftlyKit website.

Who is responsible for this site

craftlykit.com is operated by Muhammad Saad Ali, an individual working independently from Faisalabad, Punjab, Pakistan. CraftlyKit is a studio name, not a registered company. For any question about this policy or about data held about you, the contact address is craftlykit@gmail.com.

The short version

This website has no user accounts or login. It handles the information you submit through the contact form or the OdDraw launch-notification form, and technical data needed to deliver and protect the site. Google Analytics 4 and any configured advertising scripts load only after you choose “Accept all.” Forms work independently of that choice.

What is collected, and why

Contact messages

If you use the contact form, it collects the name, email address, topic, and message you type into it. That information is used to read, investigate and respond to your request. The website sends it through Resend to the studio inbox; your address is included so I can reply. The site does not store submissions in an application database or automatically add contact messages to the OdDraw notification list.

You can also simply email craftlykit@gmail.com directly, which involves no form at all.

OdDraw launch notifications

The optional “Hear when it launches” form on the games page asks for your email address so I can send the requested OdDraw launch notice. Resend delivers the signup to the studio inbox and attempts a confirmation email to you. The inbox holds the signup record; there is no subscriber database or automated launch-mailing service in this website. If confirmation delivery fails after the inbox notification succeeds, the signup still counts. This is a launch-notification request, not a newsletter subscription. The confirmation does not require a verification click before a signup is recorded.

To withdraw, email “Cancel OdDraw notification” to craftlykit@gmail.com, preferably from the address you signed up with. Once I process the request, I stop further notification sends and delete the related records under my control promptly, within 30 days.

Information collected automatically

Like effectively every website, the servers that deliver these pages record standard technical request data — IP address, browser type and version, the page requested, and the time of the request. This is processed by the hosting infrastructure (Vercel) as part of delivering and securing the site, and it is used to keep the site running and to investigate abuse or errors. Form endpoints also use the IP address supplied by the hosting proxy to limit repeated attempts. These counters are held in server memory, not a visitor-account database. Delivery failures may write provider error details to server logs.

Information stored in your own browser

Two small values may be stored locally on your device by this site. Neither is sent to a server:

• Your cookie choice, stored in localStorage, so the banner does not ask again on every page.
• A flag that the opening animation has played, stored in sessionStorage, so it does not repeat during a visit. It is cleared when you close the tab.

Clearing your browser data removes both, with no consequence other than being asked about cookies again.

Retention and deletion

Website contact correspondence

Website contact correspondence is deleted 12 months after the request is resolved. Messages are kept longer only where necessary for an ongoing dispute or legal obligation, and are deleted when that need ends.

OdDraw signup records

OdDraw signup records and associated signup/confirmation correspondence under my control are deleted within 30 days after the launch notice is sent or the launch is cancelled. If no launch notice has been sent, they are deleted 12 months after signup.

The withdrawal procedure above also applies before launch. These are manual mailbox-cleanup rules; this website does not implement an automatic deletion job. They cover records under my control, not copies in your own mailbox or every copy retained by an email provider.

Browser storage, analytics and service records

The cookie-choice value has no expiry set by this site and remains until cleared; the intro flag is session storage. The form rate limit uses a ten-minute counting window. That is not a guaranteed deletion time: an expired counter can remain in server memory until replaced, cleaned up or the server instance ends.

Google Analytics user/event-data retention is controlled through the Analytics property’s settings and Google’s processing policies. Standard aggregated reports are not deleted by that event-data retention setting and can remain available longer. See Google’s retention explanation.

Resend’s delivery records, receiving-mailbox copies and hosting logs have their own retention and backup processes. Deleting a studio inbox message does not automatically delete those service records. Requests about information under my control can be sent to craftlykit@gmail.com.

Cookies and advertising

Where advertising is configured and you have accepted non-essential cookies, third-party advertising technology may support this free website. It is separate from the information you deliberately submit through either form.

Consent comes first

No advertising or analytics cookies are set before you choose. The Google advertising script is not merely blocked from setting cookies — it is not loaded onto the page at all until you select “Accept all” in the cookie banner. If you choose “Essential only”, the site works normally and no advertising script ever runs.

Google Consent Mode signals are additionally set to “denied” by default before any script can execute, and are only updated to “granted” if you accept.

Google AdSense and third-party vendors

Where advertising is enabled and you have consented, Google — as a third-party vendor — uses cookies to serve ads on this site. Third parties other than Google may also serve ads and use cookies as part of Google’s advertising network.

Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the internet. You can review how Google uses information from sites that use its services on Google’s partner sites policy page.

The DoubleClick DART cookie

Google, as a third-party vendor, may use the DoubleClick DART cookie to serve ads based on your prior visits to this site and other sites. You can opt out of the use of the DART cookie by visiting the Google advertising and privacy policy page.

How to opt out or change what you see

• Personalised advertising can be turned off entirely at Google Ads Settings.
• Many other advertising networks can be opted out of at aboutads.info and Your Online Choices.
• You can change your choice on this site at any time by clearing site data for craftlykit.com in your browser, which makes the banner appear again.
• Every major browser can block third-party cookies entirely in its settings. This site remains fully usable if you do.

The cookie policy lists the individual cookies in more detail.

Analytics

This site uses Google Analytics 4 to understand which pages are read and how people arrive. It is loaded under exactly the same consent gate as advertising: if you choose “essential only”, or have not answered the banner, the Google Analytics script is never fetched and no analytics cookie is written.

GA4 helps me understand page use and how visitors arrive. It can process page URLs, referrers, browser and device information, approximate location, cookie-based identifiers and usage events. Those identifiers can distinguish browsers and visits; describing reports as aggregate does not mean all underlying data is anonymous. Google processes analytics data as the service provider.

The website’s custom code does not send the name, email address, topic or message entered into either form to GA4, and does not set a signed-in User-ID. GA4’s automatic and enhanced measurement can also collect interaction events, including form-start or form-submit metadata, depending on the web data stream’s settings. Those events are different from the contents of a form submission. Google explains the available events in its enhanced measurement documentation.

Analytics and advertising loaders are excluded from the Block Breaker information, privacy, support, data-controls and terms pages, including when you arrive after accepting cookies elsewhere on this site.

Google Analytics can be blocked independently of the banner with Google’s official opt-out browser add-on, which works across every site that uses it.

Children’s privacy

The audience for CraftlyKit includes people under 18 — a browser game is exactly the sort of thing a teenager clicks on — so this deserves more than a boilerplate paragraph.

This website has no account-registration system, but both forms can receive personal information, including an email address. Having no accounts does not prevent a child from submitting information.

If you are a parent or guardian and believe a child under 13 has sent personal information through the contact form, OdDraw notification form or direct email, contact craftlykit@gmail.com to request removal of the correspondence and cancellation of any launch notification. Do not send identity documents or unrelated personal information with the request.

Third-party advertising vendors have their own practices regarding minors. A cookie choice is not an age check, and having no account registration is not an exemption from applicable children’s privacy requirements.

Your rights under GDPR

If you are in the European Economic Area or the United Kingdom, you have the following rights over personal data relating to you:

• Access — to ask what personal data is held about you and receive a copy.
• Rectification — to have inaccurate data corrected.
• Erasure — to have your data deleted, subject to any legal retention requirement.
• Restriction — to limit how your data is used while a question about it is resolved.
• Objection — to object to processing based on legitimate interests, including for direct marketing.
• Portability — to receive your data in a portable format.
• Withdrawal of consent — to withdraw consent for cookies at any time, without affecting the lawfulness of processing before withdrawal.
• Complaint — to lodge a complaint with your national data protection authority.

These requests can concern contact correspondence, OdDraw signup records, or other website-related personal data described above. To exercise applicable rights, email craftlykit@gmail.com and say what you want done. Requests are handled according to the applicable law and the data involved. Removing an inbox record or clearing browser storage does not by itself delete data independently retained by Google or another provider.

The lawful bases relied on are consent, for advertising and analytics cookies, and legitimate interests, for keeping the site running, secure, and able to answer the messages people send it.

Your rights under CCPA and CPRA

If you are a California resident, you have the right to know what categories of personal information are collected and for what purpose, the right to request deletion of personal information collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising any of these rights.

CraftlyKit does not sell personal information. The term “sharing” under the CPRA can cover cross-context behavioural advertising, which is why advertising here is gated behind consent — choosing “Essential only” in the banner, or simply not accepting, means no advertising script is loaded and no such sharing takes place. To make a request under these rights, email craftlykit@gmail.com.

Third parties involved in running this site

• Vercel — hosting and content delivery. Processes request data as described above.
• Google Analytics 4 — consent-based website analytics. See Google’s Privacy Policy.
• Google AdSense — advertising, only after consent.
• Resend and the receiving email provider — deliver contact messages, OdDraw signup notifications and confirmation emails, and handle the resulting mailbox records. See Resend’s privacy policy.

Data may be processed in countries outside your own, including the United States, as a consequence of using these services.

External links

This site links to other sites, including extensions.craftlykit.com, the Chrome Web Store, and pages referenced in articles. This policy does not cover those sites, and their own privacy practices apply once you leave here.

What the TabVault extension collects

This is a separate question from what the website collects, and it is worth answering directly because it is the whole point of the extension.

TabVault stores the tabs you save, the categories you put them in, the scroll position of each page and the timestamp of each video in your own browser, on your own device. It has no account system, no sync server, and no mechanism for sending that data to CraftlyKit or to anyone else. Nothing about your browsing is collected, profiled, or sold.

The practical consequences are worth knowing: clearing your browser data clears your saved tabs, and they do not follow you to another computer. That is the trade being made in exchange for not having an account.

Security

The site is served over HTTPS. Contact messages and signup addresses still require care even though this website has no accounts or checkout. Send only information relevant to your request, and do not send passwords, payment-card details or unrelated sensitive data. No website, mailbox or delivery service can promise absolute security.

Changes to this policy

If this policy changes, the “last updated” date at the top of the page changes with it. Material changes — a new category of data collection, or a new third party — will be described here rather than quietly absorbed into the text.

Contact

Questions, requests, or corrections about this policy: craftlykit@gmail.com, or use the contact form. Both reach the same person.