Privacy Policy
Effective date: 2026-11-06
1. Embedded Player
The Craft Gradients embedded player (embedded.js) renders the visual output
locally using the parameters you provide. After a gradient starts successfully, it makes
one background request per page load to our domain usage endpoint. The payload contains
only the embedding page’s hostname (for example, example.com) and the event
format version. For inline embed frames, the player uses an available parent origin
or the hostname from the frame’s referrer to determine the embedding domain; the
full referrer URL is never transmitted. The payload does not include the page path, query string, gradient settings,
or a visitor identifier. The request omits cookies and the Referer header. The player
does not set cookies or use browser storage for tracking, and does not load Google
Analytics on the embedding site.
We use these events to discover which domains use the player. In Supabase, we retain one record per hostname containing a report count and the first and latest receipt times. These records have no automatic expiry and remain until we delete them. Access is restricted to our server and project administrators; public browser clients cannot read or change them. Counts represent received reports, not unique visitors or verified domain ownership.
Vercel runtime logs also contain diagnostic events, with retention determined by the hosting plan. Our hosting providers process normal network metadata such as IP addresses as part of serving requests; this metadata is not included in our application’s domain records.
Site owners can disable domain reporting by setting
window.CRAFT_GRADIENT_TRACKING = false before loading the player.
Domain reporting is best effort: blocking or disabling it does not prevent rendering.
The collector's database request has a three-second timeout and no automatic retry;
failures can leave reports uncounted.
2. Documentation Pages
The documentation/demo pages (e.g., embedded.html) may use third‑party
analytics (such as Google Analytics) to understand aggregate usage of the docs
site. These tools may set cookies or collect pseudonymous usage data per their own
policies. You can manage such cookies via your browser settings. These third-party
analytics are separate from the player’s domain reporting described above.
3. Data You Provide
If you contact us directly (e.g., by email), we will receive the information you send and use it to respond to your inquiry.
4. Security
We take reasonable measures to protect information, but no method of transmission or storage is 100% secure.
5. Children’s Privacy
The Embedded Player and documentation pages are not directed to children under the age of 13. We do not knowingly collect personal information from children.
6. Changes
We may update this Policy from time to time. The “Effective date” above indicates the latest version.
7. Contact
Privacy questions: hello@artcreativecode.com