Privacy Policy

The short version

Cashew Crate offers two types of tools. Our file tools (PDFs, images, audio, code) process everything in your browser — files never leave your device. Our productivity tools (counters, trackers, notes) store data locally by default, with optional cloud sync when you sign in. We use cookies for authentication and advertising (with your consent).

How our tools work

File-processing tools (PaperMint, CrunchPix, Cutout Craft, SliceTune, CodeDelta, FillFox, FormatFlip, ClipShrink, etc.) process everything in your browser using JavaScript and WebAssembly. Your files are never uploaded to our servers. When you close the tab, your data is gone.

Productivity tools (DeskBurn, Shelvd, PennyScope, SnapTally, Notchpad, etc.) store your data locally in your browser by default. When you sign in, your data can sync to our servers (hosted on Supabase via Cloudflare Workers) so you can access it across devices. We store only the minimum data needed for the tool to function.

Data we do not collect

• •Your files or documents (file tools never upload them)
• •Behavioral tracking or analytics profiles

We collect your email address only when you choose to sign in.

Data stored locally

Our tools use your browser's localStorage to store:

• •Daily usage count (resets each day)
• •Pro license status (if you purchase a subscription)
• •Cookie consent preferences
• •App preferences (theme, last-used settings)

This data stays on your device and is never transmitted to us. You can clear it at any time via your browser settings.

Authentication

You can sign in to Cashew Crate using Google or Apple. When you sign in, we receive your email address and basic profile information from the authentication provider. We use this to manage your account and subscriptions. Authentication is handled by our shared service (auth.cashewcrate.com) and Supabase.

Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies — Required for basic site functionality. These cannot be disabled.
• Advertising cookies — Used by Google AdSense to show relevant ads (free tier only). These are only enabled with your consent.

You can manage your cookie preferences at any time. In the UK and EU, we will ask for your consent before setting non-essential cookies. Pro users do not see ads and no advertising cookies are set for them.

Advertising (Google AdSense)

Free tier users may see advertisements powered by Google AdSense. Google may use cookies to serve ads based on your prior visits to this site or other websites. You can opt out of personalized advertising by visiting Google's Ads Settings.

We implement Google Consent Mode v2 to respect your privacy choices. If you decline advertising cookies, ads will be shown in a non-personalized manner or not at all.

Analytics

We use Google Analytics (GA4) in cookieless mode by default to understand aggregate page views and usage patterns. If you consent to analytics cookies, GA4 may use cookies for more detailed (but still anonymous) analytics. We do not use analytics data to identify individual users. Google Consent Mode v2 ensures your privacy preferences are respected.

Payment processing

Pro subscriptions are processed by Polar, a Merchant of Record. They handle all payment data, including credit card information, billing addresses, and tax compliance. We never see or store your payment details. Polar's privacy policy governs how they process your payment information.

Data retention

• •Your files: Never stored. Processing happens in your browser and data is gone when you close the tab.
• •Access data: Stored locally in your browser until you clear it.
• •Payment records: Retained by Polar as required by law.
• •Server logs: Automatically deleted after 30 days.

Your rights (UK/EU GDPR)

If you are in the UK or EU, you have the following rights under GDPR:

• •Right to access: Request a copy of any personal data we hold about you (though we hold very little).
• •Right to rectification: Request correction of inaccurate data.
• •Right to erasure: Request deletion of your personal data.
• •Right to restrict processing: Request limits on how we use your data.
• •Right to data portability: Request your data in a portable format.
• •Right to object: Object to processing, including direct marketing.
• •Right to withdraw consent: Withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at the email below. You also have the right to lodge a complaint with a supervisory authority (the ICO in the UK).

Third-party services

• Polar — Processes payments for Pro subscriptions. Their privacy policy applies to payment data. We do not store payment information.
• Google AdSense — May display ads on free-tier pages (with consent). Google's privacy policy applies to ad data. Pro users see no ads.
• Cloudflare — Provides hosting and CDN services. Standard web server logs may include IP addresses. No file content is transmitted.
• Google / Apple — Authentication providers. When you sign in, they share your email address and basic profile with us. Their respective privacy policies govern how they handle your data.
• Supabase — Hosts our database for productivity tool data and user accounts. Data is stored in the EU/US. Their privacy policy applies to infrastructure-level data handling.
• Google Analytics — Collects anonymous, aggregate usage data (page views, device type). Runs in cookieless mode by default; uses cookies only with your consent.

Changes to this policy

We may update this privacy policy from time to time. Material changes will be posted on this page with an updated revision date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact us

For privacy-related questions, data requests, or to exercise your rights, contact us at: [email protected]

For general support: [email protected]

Related: Terms of Service · Refunds & Cancellations