Privacy Policy

Last Revision: September 23, 2019

This policy describes the information we process to support the Heavy Craft website and our widgets.

  1. What kind of information do we collect and why?
    To successfully provide our services, we must process information about you. There are various types of the information that we collect depends on how you use Heavy Craft.
    • When you see our widget or visit our website
      We collect only basic logs information – your device IP address, connection information, such as browser type and version, operating system, mobile platform, unique device identifier and other technical identifiers. The date, time and referrer URL of your request. All this data is collected automatically. This is standard procedure on almost every website. In some cases, we also use cookies. All information is collected primarily to prevent abuses, detect attacks and to comply with law regulations about storing such logs.
    • Additional information we collect when you use our website
      We use Google Analytics for better understanding how our users interact with our website. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Although Google Analytics records data such as your IP address (we use IP address anonymization), geographical location, device, internet browser and operating system, none of this information personally identifies you to us.
    • Instagram data we collect when utilizing our widgets
      We use Instagram API to get information about your account to present feeds within our widgets. When you log in to our website for the first time Instagram will ask you if you want to give us permissions to read basic information about your account. Without this consent on Instagram side we do not read any information from Instagram API.
      When you grant us access to read basic information we store some of these data in our database. We may store: Your Instagram user ID, Your Instagram username, Your full name (if you provided any in your Instagram profile). Link to your profile picture. We do not store any images on our servers. Instagram access token is used to create an account on our website. With such account you can easily create, edit, upgrade and remove widgets. We do not store your e-mail address nor password to your Instagram account.
      When you try to create a widget on our website we use Instagram API to get information about your pictures and videos to link to Instagram posts, images, videos, thumbnails, tags, captions, comments, and likes.
      Data is temporarily cached for a maximum of 24 hours and only data necessary to create and utilize Instagram widgets is used.
  2. Data security and our third party data processors
    We care about your data security. We will not share, sell, convey or otherwise disclose personal data other than as stated in this Privacy Policy, unless we are required to do so by law or you have given your explicit consent. If there is suspicion of illegal activities in connection with use of our services, information may be disclosed to the police and other public authorities subject to a court or administrative order. We use a number of third parties to process personal data on our behalf. It makes our services more secure and reliable. These third parties have been carefully chosen and have very high level of data security.
  3. Data breaches
    We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.
  4. Sharing data
    Heavy Craft provides responsive widgets for Instagram. Widgets contains information that you share on Instagram, like your pictures and videos. Widgets can be embedded on any third party website. It means that hundreds of people can see your pictures, but this is what widgets are for. When you create a widget you want to promote your pictures and Instagram account. It is up to our users where and how they embed our widgets.
    We need a customer’s consent and authorization before we can get the information from Instagram API. We do not share, sell, convey or otherwise disclose personal data. We want to be fair with our users. Pictures and videos posted on Instagram and displayed in our widgets are their property, not ours.
  5. Changes to our Privacy Policy
    This privacy policy may change from time to time inline with legislation or website developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.