Privacy Policy

1. Data controller

Crownme (crownme.xyz) is the controller of the personal data described in this policy.

Privacy contact: privacy@crownme.xyz

2. Data we collect

Account data: email, password (stored securely as a hash), username (handle), and display name.

Public profile data: avatar, description, links, themes, backgrounds, badges, music, and any content you choose to publish.

Usage and analytics data: profile visits, link clicks, IP address (and hashed IP for aggregated reports), user agent, referrer, device type, and session or preference cookies.

Support data: information you send when contacting us.

3. Purposes of processing

We use your data to:

• Create your account, authenticate you, and provide the service
• Display your public profile at crownme.xyz/your-username
• Provide analytics to the profile owner
• Ensure security, prevent abuse, and enforce technical limits
• Improve the platform and fix errors
• Send essential service communications
• Send marketing only with your explicit consent

4. Legal basis (GDPR)

Where European law applies, we process data based on: contract performance (providing the service), legitimate interest (security, aggregated analytics, product improvement), and consent (marketing and non-essential cookies, where applicable).

5. Who we share data with

We do not sell your personal data. We may share it with providers that help us operate Crownme:

• Hosting, CDN, and storage infrastructure
• Transactional email services
• Payment processors (when paid plans are active)
• Competent authorities when required by law

6. Public profiles

Your profile and links are public by design. Anyone with the URL can view content you publish. Do not include sensitive information you do not want to be public.

When you visit other users' profiles, we record aggregated analytics events for the profile owner; we do not create a visitor account.

7. Data retention

We retain data while your account is active. After you request deletion, we will delete or anonymize your information within 30 to 90 days, unless legal retention obligations apply.

Security logs may be kept for up to 12 months.

8. Your rights

Depending on your jurisdiction (GDPR, CCPA, or other laws), you may request access, correction, deletion, portability, objection, or restriction of processing, and withdraw consent where applicable.

Send requests to privacy@crownme.xyz. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies for:

• Essential: session, authentication, and security
• Preferences: light/dark theme and language
• Internal analytics: aggregated usage metrics

10. Security

We apply technical and organizational measures such as HTTPS encryption, hashed passwords, and restricted system access. No transmission or storage method is 100% secure.

11. Minors

Crownme is not directed at children under 13. If we detect a minor's account, we will delete it.

12. International transfers

Your data may be processed on servers outside your country. We adopt appropriate safeguards, such as standard contractual clauses, when required by law.

13. Changes to this policy

We will update this policy when data processing changes. The revision date appears at the top and, if the change is material, we will notify you by reasonable means.

14. Contact

Privacy inquiries: privacy@crownme.xyz