Privacy Policy

Last updated: April 14, 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Account Information: Name, email address, and profile information when you create an account or sign in using third-party authentication providers (Google or Discord)
  • Third-Party Authentication Data: When you sign in using Google or Discord OAuth, we receive your basic profile information (such as name, email, and profile picture) from these providers. We do not receive or store your passwords from these services.
  • Payment Information: Billing address and payment details processed by third-party payment processors used by Crowment. Your card number, expiry date, and CVV are never stored on our servers — only secure reference tokens provided by the relevant payment processor are retained.
  • Usage Data: Information about how you use our Service
  • Widget Data: Content and interactions submitted through our widgets. Currently, this includes comments and media uploads through our comment widget.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Monitor and analyze trends and usage

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent
  • With third-party service providers who assist in our operations (see Section 4 for details)
  • To comply with legal obligations
  • To protect our rights and prevent fraud

4. Third-Party Service Providers

The Service relies on the following categories of third-party providers to operate. Each provider may process certain data as necessary to deliver their service. Crowment is not responsible for the data practices of these providers — please refer to their respective privacy policies for details.

  • Payment Processing: We use a third-party payment processor (Dodo Payments) to handle all checkout, subscription billing, and payment method management. Crowment never receives or stores your raw card data.
  • CDN & Security: We use Cloudflare and similar infrastructure providers for content delivery, DDoS protection, and network security. Your requests may be routed through their infrastructure.
  • Authentication: Sign-in is handled via Google and Discord OAuth. We receive only your basic profile information (name, email, profile picture) from these providers.
  • Hosting & Infrastructure: We use cloud hosting and infrastructure providers to operate our servers, databases, and storage systems.

We take reasonable steps to select reputable providers, but we cannot guarantee the security or privacy practices of any third party and are not liable for any issues arising from their systems.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Crowment does not process, store, or have access to your raw payment card data — all payment handling is done by our payment processor.

Website Owner Responsibility: The security of user-submitted data also depends on the websites that integrate our widgets. Website owners who use Crowment are responsible for implementing adequate security measures on their own websites, including but not limited to protection against cross-site scripting (XSS) attacks, proper content security policies, and measures to prevent token leakage. Crowment cannot be held responsible for security vulnerabilities or data breaches resulting from inadequate security practices on third-party websites using our widgets.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Our data retention practices vary based on the type of action:

Comment Deletion

When a comment is deleted — whether by the comment author, the site owner, a moderator, or a platform administrator — the comment is soft deleted. Soft-deleted comments are no longer visible to users but are retained in our systems for 6 months to comply with legal requirements. After this period, the data is permanently and irreversibly deleted.

Subscription Cancellation or Payment Failure

When a paid subscription ends (through cancellation or failed payments), all data (comments, media, and settings) is preserved in a read-only state for a 2-month period. During this time, widgets remain visible but will not process new data. If no new subscription is activated within this 2-month period, all associated data is permanently and irreversibly deleted from our systems with no possibility of recovery.

Account Deletion

When a user requests account deletion, the account and all associated data are immediately soft deleted and retained for 6 months to comply with legal requirements. During this period, the user may reactivate their account by logging in with the same authentication provider. After 6 months, all data is permanently and irreversibly deleted.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability

8. Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

9. Age Requirement

Our Service is intended for users who are 18 years of age or older. By using our Service, you confirm that you are at least 18 years old. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a user under 18, we will take steps to delete that information.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@crowment.com.