Privacy Policy

1. What we collect

Account details: your maker name, a salted password hash (never your plain password), and — if you use Sign in with Apple — the stable Apple identifier associated with WoArt.

Profile details you choose to add: display name, handle, bio, location, craft and profile images.

Your activity: posts, photographs and videos you upload, comments, likes, follows, friend requests, blocks and gathering reservations.

Safety records: reports you submit, the content or profile reported, and the action taken.

Technical data needed to run the service: session tokens (stored as hashes), request timestamps and IP addresses in transient logs used for security and abuse prevention.

2. Where it lives

Account, community and reservation data is stored in a Cloudflare D1 database. Uploaded images and videos are stored in Cloudflare R2 object storage and delivered through Cloudflare's network. Cloudflare processes this data on our behalf under its data processing terms.

Passwords are stored only as PBKDF2-HMAC-SHA256 hashes with a random salt. Session tokens are stored as SHA-256 hashes, so the raw token exists only on your device.

The Bench — your projects, parts, stock, cut lists and build steps — stays on your device and is not uploaded to our servers.

3. Photos and videos

When you choose a photo or a video for a post, profile or gathering, the app uploads only the file you selected. We store the original file, may generate smaller previews, and serve the file from our media host. We do not browse your photo library.

Deleting a post, a gathering or your account removes the associated files from our live storage. Cached copies may remain briefly on Cloudflare's edge.

4. Why we use it

To create and secure your account, show the community you asked to see, deliver the tools, operate reservations, keep the community safe, respond to support requests, and meet legal obligations.

We do not use your data for advertising, profiling or sale. We do not use third-party analytics SDKs.

5. Sign in with Apple

If you use Sign in with Apple, Apple provides a stable identifier so WoArt can recognise your account, and — only if you choose to share it — your name and email. Apple's own privacy policy applies to the sign-in step.

6. Sharing

Your profile and the content you publish are visible to other makers in the app. Your email address and password are never shown publicly.

We share data with service providers only as needed to run WoArt (hosting, storage and content delivery through Cloudflare), and with authorities where the law requires it. We do not sell data.

7. Retention

We keep account and content data while your account is open. Deleting your account removes your profile, content, media and reservations from live systems. Safety reports may be retained in de-identified form, and minimal records may be kept where law requires.

8. Your choices and rights

You can edit or delete your profile, posts, comments and account at any time in the app. Depending on where you live, you may also have the right to access, correct, export or delete your personal data, or to object to certain processing.

Send requests to support@woart.app. We may need to verify that the request comes from the account holder. You can also complain to your local data protection authority.

9. Children

WoArt is not directed at children under 13. If you learn that a child has created an account, contact us and we will remove it.

10. Changes and contact

If this policy changes materially, we will tell you in the app before the change takes effect. Questions: support@woart.app.