Privacy Policy

1) Who we are

BrightCell Craft operates brightcell.online and determines how and why information is processed for the website. For privacy questions, you can contact us using the request form on this page.

• Website: brightcell.online
• Support phone: +1 (415) 792-6384
• Service hours: Mon–Fri, 09:00–18:00 (local time)

2) Data we collect

We minimize data collection and only request information required to run the site and respond to your requests. Depending on your actions, we may collect:

• Contact details you submit (name, email, message content) when using our request form.
• Technical and usage data (device type, browser, approximate location derived from IP, pages viewed, timestamps).
• Cookie and preference signals (consent state, selected categories, theme preference).
• Security signals (rate-limiting flags, suspicious activity indicators, and server error logs).

We do not intentionally collect sensitive personal data. Please avoid submitting sensitive information in free-text fields.

3) How we use data (purposes & legal bases)

We process information for the following purposes. Depending on your jurisdiction, a “legal basis” may include consent, contractual necessity, legitimate interests, or compliance with law.

• Provide and maintain site functionality, including saved preferences (legitimate interests / consent for non-essential cookies).
• Respond to requests, questions, and support messages (contractual necessity / legitimate interests).
• Measure performance and improve user experience using aggregated analytics (consent where required).
• Detect, prevent, and investigate abuse, fraud, and security incidents (legitimate interests / legal obligations).
• Comply with applicable laws and enforce our terms (legal obligations / legitimate interests).

You may withdraw consent at any time using the cookie preferences controls on this page.

4) Cookies & similar technologies

Cookies are small text files stored on your device. We use them to keep the site secure, remember preferences, and—if you allow—understand usage patterns.

• Strictly necessary: required for core features (e.g., consent storage, basic security).
• Preferences: saves settings such as theme (light/dark).
• Analytics: helps us understand traffic and improve content (enabled only if you consent).

5) Sharing, processors & international transfers

We may share data with trusted service providers that help us operate the site (for example, hosting, security, and email delivery). Providers receive only what’s necessary to perform their tasks and must protect it.

• Hosting and infrastructure providers (site delivery, uptime, backups).
• Security and abuse prevention (rate limiting, bot protection, audit logs).
• Analytics providers (only if you consent to analytics cookies).

If information is transferred internationally, we use appropriate safeguards such as contractual protections and security controls.

6) Security

We implement technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. No system is 100% secure, but we continuously improve safeguards.

• Transport security (HTTPS) and secure headers where applicable.
• Access controls and least-privilege practices for administrative systems.
• Monitoring, audit logging, and abuse detection.
• Data minimization and retention limits.

7) Your rights and choices

Depending on your location, you may have rights over your personal data, including the right to access, correct, delete, restrict processing, object, and receive a portable copy. You can also opt out of certain processing.

• Request access to personal data we hold about you.
• Request correction or deletion where applicable.
• Withdraw cookie consent and change preferences at any time.
• Object to certain processing based on legitimate interests.

8) Data retention

We keep data only for as long as necessary for the purposes described in this policy, then delete or anonymize it. Retention periods vary based on context:

• Request form messages: typically up to 12 months unless longer retention is required for legal or security reasons.
• Security logs: typically 30–180 days depending on severity and operational needs.
• Cookie preferences: stored until you reset consent or clear your browser storage.

9) Changes to this policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice on the site.

For questions, use the request form on this page. We aim to respond within a reasonable timeframe, typically within 30 days depending on the complexity of the request.