1. Scope
This Privacy Policy applies to the CrabbyTown iOS app and to this webpage where the policy is published. CrabbyTown is an ecommerce-style app for crab plush toys, collectibles, keychains, cushions, vinyl figures, handmade items, and related product trading and order management.
This policy does not apply to independent third-party websites, apps, payment providers, logistics providers, or other services that are not controlled by us. Those third parties process information under their own privacy policies.
2. Processing Overview
We handle username, nickname, profile bio, avatar seed, registration time, sign-in time, and password hash to create accounts, verify sign-in, and display profile information.
We handle favorites, cart items, order number, products, quantities, prices, order status, order time, notes, and payment status to support checkout and order history.
We handle recipient name, phone number, region, detailed address, and default-address status to display delivery information and create order address snapshots.
We handle in-app wallet balance and order amounts needed for balance payment. The current version does not collect bank card numbers, payment account passwords, or full payment credentials.
3. Information We Collect or Handle
| Account Information | Username, nickname, profile bio, avatar seed, registration date, and sign-in time. This information is used for account creation, sign-in, profile display, and linking local favorites, cart, orders, addresses, and wallet balance to the correct account. |
|---|---|
| Sign-In Credentials | The App stores a hashed password in iOS Keychain. Passwords are not stored in plain text. The hash is used for local sign-in verification and account security. |
| Product Interaction Data | Favorites, cart products, product IDs, quantities, unit prices, product titles, and product series information. This data supports favorites, cart management, checkout, and restoration of local shopping status. |
| Order Data | Order ID, order code, username, product items, total amount, order status, creation time, order note, shipping address snapshot, payment method, and payment status. This data is used to create orders, show order details, mark orders as completed, and support after-sales review. |
| Shipping Address | Recipient name, phone number, region, detailed address, and default-address setting. This information is used to show delivery information during checkout and in order details. |
| Wallet Balance | In-app wallet balance and order amount required for balance payment. This information is used to show wallet balance, process balance deductions, and confirm payment status. |
| Local Device Storage | The App uses iOS UserDefaults to store account records, favorites, cart data, orders, addresses, wallet balances, and session state. The App uses iOS Keychain to store password hashes. |
| Privacy Policy Website Logs | When users visit this policy page hosted on Cloudflare Pages, Cloudflare may process IP address, access time, browser type, device information, requested URL, and security logs to provide page delivery, security protection, and service reliability. These website access logs are not combined with CrabbyTown in-app account data. |
Information We Do Not Intentionally Collect
- Government ID numbers, bank card numbers, full payment credentials, or payment account passwords.
- Precise geolocation, contacts, SMS, call history, photo or video library, microphone data, camera data, calendar data, health data, or biometric data.
- Advertising identifiers used for cross-app tracking. This policy webpage does not include advertising tracking scripts.
4. How We Use Information
- To provide account registration, sign-in, sign-out, profile update, and account deletion features.
- To display products, save favorites, manage cart items, create orders, show order status, and show order details.
- To show recipient name, phone number, and shipping address during checkout and in order details.
- To process in-app wallet balance payments, calculate order amounts, deduct wallet balance, and mark payment status.
- To respond to privacy, account, order, or after-sales requests sent to posndsn@163.com.
- To maintain service security, troubleshoot issues, verify user requests, handle disputes, and comply with applicable laws and regulations.
5. Storage, Retention, and Security
In-App Data
In CrabbyTown v1.0, the main business data is stored locally on the user's device. Deleting the App, clearing app data, or deleting the account in the App will remove local account records, favorites, cart data, orders, addresses, and wallet records. Password hashes are stored in iOS Keychain and are removed when the corresponding account is deleted.
Retention
Local data is generally retained until the user deletes the account, deletes the App, or clears app data from the device. Information users voluntarily send to us by email for support, after-sales service, dispute handling, or privacy requests will be kept only for as long as necessary to handle the request, meet legal obligations, or resolve disputes. When it is no longer needed, we will delete or anonymize it where appropriate.
Security Measures
We use local system storage, Keychain credential protection, minimal necessary processing, and access limitation practices to reduce the risk of unauthorized access, disclosure, loss, misuse, or alteration. No internet or device environment can be guaranteed to be completely secure. Users should keep their devices, system accounts, and app credentials protected.
7. User Choices and Rights
Users can view and update their nickname, profile bio, and shipping addresses in the App. Users can also manage favorites, cart items, and orders. The App includes an account deletion function that removes the current account and its locally associated data.
Users may contact us at posndsn@163.com to request access, correction, deletion, withdrawal of consent, account deletion support, an explanation of this policy, or complaint handling. To protect account security, we may need to verify that the requester is connected to the relevant account or order.
We will respond to requests as soon as reasonably possible. If a request cannot be completed immediately because of legal obligations, dispute handling, transaction security, or technical limitations, we will explain the reason.
8. Children's Privacy
CrabbyTown is designed for general shopping and collecting scenarios. Children should use the App only with the consent and supervision of a parent or legal guardian. If a parent or guardian believes that a child has submitted personal information without consent, please contact us at posndsn@163.com.
9. International Processing
In CrabbyTown v1.0, the main business data is stored locally on the user's device and is not transferred through our own backend server. This policy webpage is hosted on Cloudflare Pages. Website access logs may be processed by Cloudflare in different regions according to its global network architecture for page delivery, security protection, and network stability.
10. Changes to This Policy
We may update this Privacy Policy to reflect feature changes, legal requirements, or security needs. The updated policy will be posted on this page, and the effective date shown at the top will indicate the latest version. If an update materially changes the purpose, method, or scope of personal information processing, we will provide a prominent notice in the App or on this page where appropriate.
11. Contact Us
If you have questions about this Privacy Policy, personal information handling, account deletion, order privacy, or after-sales information, please contact us:
App Name: CrabbyTown - Crab Plush Trading
Email: posndsn@163.com
Request Scope: privacy inquiries, account and local data deletion assistance, order and after-sales information review, complaints, and suggestions.