Privacy policy.

Wondercraft safeguards account, corporate and licence data. We process contact details, transaction histories, unique licence keys and verification diagnostics including domain, IP address, browser information, check time and result.

Licence checks protect intellectual property and confirm the registered domain allowance. We do not intercept customer transactions, read customer databases or scrape the content published inside your deployed website.

Verification records are used for licence support, security and compliance. They are not sold or traded to marketing brokers. Account and licence records may be retained where needed for legal obligations, disputes or fraud prevention.

Account details you give us: name, email address, avatar and any billing or company details you add to your profile.

Order and project data: the builds you buy, customisation requests you log, support tickets and messages.

Analytics data: page visits, approximate location derived from your IP address, browser, operating system and device type, plus any referral code used.

To deliver and support the build you purchased, track your website enhancement packs and answer support tickets.

To operate the referral programme and calculate commission.

To understand how the marketplace is used so we can improve listings, pages and performance.

To send transactional emails, and newsletters where you ticked the consent box.

We only add you to the newsletter when you explicitly consent. Every email includes an unsubscribe link, and unsubscribing does not affect emails about your orders.

We record visits to build an internal live-visitor view. This includes an approximate town or city derived from your IP address; we do not use it to identify you personally and we do not sell it.

Logs are retained on a rolling basis and used only by our own team.

We share information with authorised providers needed to operate the marketplace: cloud hosting and account services, Resend email delivery, and payment services such as Stripe, card networks and PayPal. Providers may act as processors or independent controllers under their own privacy terms. Optional Google Analytics is subject to your cookie choice.

We never sell personal data or share it for third-party advertising.

You can access, correct, export or delete your personal data. Most of it is editable directly in your customer area profile.

To request deletion of your account and associated data, contact us through the support desk and we will action it within 30 days.

Accounts are protected by the authentication providers you choose, and database access is restricted by row-level security so you can only read your own records.

Admin access is limited to named studio staff.

Questions about privacy can be sent through the contact page or the support desk in your customer area.