Privacy policy

This policy covers the website cryptonstudio.app (“the site”), operated by Crypton Studio (“we”, “us”), an independent software studio based in India. It describes what data the site handles and the choices you have. The short version: this site runs no advertising and no tracking cookies; the only measurement is cookieless, aggregate page statistics that cannot identify you, and the site collects personal data only when you deliberately send it through the contact form or by email.

1. Scope — website only

This policy applies to the site, not to our apps. Each app (for example ScanCrypt) has its own privacy policy, available in the app and on its Google Play listing. If you are looking for how an app treats your documents and data, read that app’s policy — it is the authoritative document for the app.

2. Data we collect, and why

Contact form and email

When you submit the contact form, you send us: your name, email address, optional company name, a project type, a budget range, and your message. We use this data for exactly one purpose: reading your enquiry and replying to it.

• Submissions are delivered to our inbox as email and are not written to a database by the site.
• Email delivery is handled by Resend (resend.com), our email processor.
• We keep correspondence as long as needed to handle your enquiry and any project that follows, after which it can be deleted on request.

Server and security logs

The site is hosted on Vercel. Like any web host, Vercel processes standard request metadata (IP address, user agent, requested URL, timestamps) in short-lived server logs used for operating and securing the service, including rate limiting of the contact API. We do not use this data to profile you.

Theme preference

If you switch between light and dark mode, your choice is stored in your browser’s localStorage under a theme key. It never leaves your device and you can clear it at any time in your browser settings. See the cookie policy for details.

Cookieless usage analytics

The site uses Vercel Web Analytics to understand, in aggregate, which pages are read and where visitors arrive from (page URL, referrer, country, browser and device class). It is cookieless by design: nothing is stored in your browser, there is no cross-site tracking, and visits are counted via a short-lived anonymised hash that cannot identify you. We only ever see aggregate numbers, never individual profiles.

Launch notes and the newsletter (optional)

If you choose to leave your email for product launch notes or blog build notes, that address is stored as a subscriber list in Resend, our email processor, and is used for exactly one thing: sending you the notes you asked for. No tracking profiles are built from it and it is never shared or sold. Every email includes an unsubscribe link, and you can also ask us to remove you at any time at support@cryptonstudio.app.

3. What we do not do

• No invasive analytics — only the cookieless, aggregate page statistics described in section 2; no individual visitor profiles, ever.
• No advertising and no ad networks on this site.
• No tracking cookies and no fingerprinting.
• No sale or sharing of your personal data for marketing. Ever.

4. Processors we rely on

Running the site involves two service providers, both processing data on our behalf:

• Vercel — hosting, content delivery, and the cookieless aggregate analytics described in section 2 (server logs as described above).
• Resend — transactional email delivery for contact-form submissions and, if you subscribe, storage of the launch-notes / newsletter subscriber list.

5. Your rights

You can ask us at any time to access, correct, or delete the personal data we hold about you (practically: your contact-form submissions and email correspondence). Email support@cryptonstudio.app and we will act on the request promptly. Depending on where you live, you may have additional statutory rights (for example under the GDPR if you are in the EU/EEA, or under India’s DPDP Act); we honour reasonable requests regardless of jurisdiction.

6. Retention

Contact correspondence is kept while an enquiry or engagement is active and for a reasonable period afterwards for record-keeping, then deleted. Host-level request logs are retained by Vercel for short operational windows under their own policies.

7. Children

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

8. Changes to this policy

If this policy changes, the new version will be published on this page with an updated date above. Material changes will be noted plainly at the top of the page.

9. Contact

Privacy questions, access requests, deletions: support@cryptonstudio.app.