Controller and contact
CrackMac Creative Studios is the public name of an unregistered, non-commercial personal project. The individual responsible for its account data is CrackMac, Netherlands. Contact: account@crackmac.nl.
Legal · Effective 11 August 2026
Privacy policy.
What the CrackMac account service stores, why it is needed, and the choices you have.
Data we store
When you create an account we store your email address, chosen profile name, password hash, verification state, accepted terms version, account dates, signed-in device labels, session dates, security events and, when available, your claimed product library. Your profile name may be an alias. Passwords and active session tokens are not stored in readable form. Application security events use only an approximate network prefix and do not store your full IP address or browser user-agent.
Why it is used and the legal basis
We process core account, profile, session, library and service-email data because it is necessary to provide the account service and take the steps you request under the terms. We process rate-limit and security records for our legitimate interest in preventing abuse, protecting accounts and diagnosing security incidents. We may retain or disclose limited records where a legal obligation requires it. Account data is not used for advertising or sold.
What you must provide
An email address, profile name, password and acceptance of the current terms are required to create an account; without them the account cannot be provided. The profile name does not need to be your real name. A future claimed-product library is optional until you choose to claim something. The service does not profile you or make decisions with legal or similarly significant effects. Automated rate limits may temporarily delay repeated requests to protect the service.
Service providers and transfers
Cloudflare provides the account Worker and D1 database. Resend, operated by Plus Five Five, Inc., receives the destination email address, display name and verification or reset-message content needed to send account email. Processing may occur outside the European Economic Area under the providers' data-processing terms and transfer safeguards, including standard contractual clauses where applicable. Copies of or questions about those safeguards can be requested at account@crackmac.nl.
Retention and deletion
Your profile and library remain while the account is active. Verification links expire after 24 hours, password-reset links after 30 minutes and launcher authorization codes after 2 minutes. Website sessions expire after 14 days and launcher sessions after 30 days; old expired or revoked session records are removed after 30 days. Rate-limit records are removed after 2 days and application security events after 30 days. Deleting the account removes its profile, sessions and library from the live account database, subject to provider backup expiry and any legal preservation duty.
Your choices
The account page lets you correct your profile name, review and revoke devices, download a machine-readable copy of your account data and permanently delete the account. You may also ask for access, correction, erasure, restriction, portability or object to processing by contacting account@crackmac.nl. Requests are normally free. We may need to confirm your identity before acting.
Questions and complaints
Contact account@crackmac.nl first so we can investigate a privacy request or concern. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl, or with another competent supervisory authority.