Privacy Policy
This Privacy Policy describes how Crosspad ("we", "us", or "our") collects, uses, and protects your personal information when you use our platform.
1. Information We Collect
1.1 Account Information
When you register for an account, we collect:
- Username
- Email address
- Password (stored as a secure hash, never in plain text)
1.2 Usage Data
We automatically collect certain information when you use the Service:
This data is collected through Google Analytics to help us understand how users interact with our platform and improve the Service.
- Pages visited and features used
- Browser type and version
- Device type and screen resolution
- Referring URL
- Session duration and interaction patterns
1.3 User Content
We store the content you upload and create on the platform, including:
- Audio samples and sound files
- Kit configurations and settings
- Kit metadata (names, descriptions, categories)
1.4 Technical Data
Our infrastructure provider Cloudflare automatically collects:
- IP address (for security and performance purposes)
- Request headers and metadata
- Connection information
2. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Process your account registration and manage your account
- Store and serve your uploaded content
- Analyze usage patterns to improve user experience (via Google Analytics)
- Protect against unauthorized access and abuse (via Cloudflare security and rate limiting)
- Send important service-related notifications
- Enforce our Terms of Service
3. Data Storage and Infrastructure
3.1 Cloudflare Services
Your data is processed and stored using Cloudflare's infrastructure:
All data is handled within Cloudflare's global network. Please refer to Cloudflare's privacy policy for details on their data handling practices.
- Cloudflare D1 — Our primary database for account information, kit metadata, and application data
- Cloudflare R2 — Object storage for audio samples and uploaded files
- Cloudflare KV — Key-value storage used for rate limiting and session management
- Cloudflare Workers — Serverless compute that processes your requests
3.2 Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your account information will be permanently deleted
- Your uploaded audio files will be removed from storage
- Your kit configurations will be deleted
- Aggregated, anonymized analytics data may be retained
4. Analytics
4.1 Google Analytics
We use Google Analytics to collect and analyze usage data. Google Analytics uses cookies and similar technologies to track user interactions. The data collected includes:
Google Analytics data is processed by Google. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google's Privacy Policy.
- Page views and navigation patterns
- Session duration and frequency
- Device and browser information
- Geographic location (country/region level)
4.2 Cloudflare Analytics
Cloudflare provides us with aggregated analytics about traffic patterns, security threats, and performance metrics. This data is generally anonymized and used for infrastructure monitoring.
5. Data Sharing
We do not sell your personal information. We may share your data only in the following circumstances:
- Service Providers — With Cloudflare and Google as described above, solely to provide and improve the Service
- Legal Requirements — When required by law, court order, or governmental authority
- Safety — To protect the rights, property, or safety of Crosspad, our users, or the public
- Business Transfers — In connection with a merger, acquisition, or sale of assets
6. Data Security
We implement reasonable security measures to protect your data:
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
- Passwords are hashed using secure algorithms before storage
- All connections are encrypted via HTTPS/TLS
- Rate limiting is enforced to prevent abuse
- Access to infrastructure is restricted and monitored
- Cloudflare provides DDoS protection and Web Application Firewall
7. Your Rights
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, please contact us through the platform.
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Export your data in a portable format
8. Children's Privacy
Crosspad is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own through Cloudflare's global network. By using the Service, you consent to such transfers. Cloudflare maintains appropriate safeguards for international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
11. Contact
If you have any questions about this Privacy Policy, please contact us through our platform.