Privacy Policy

Welcome to the Privacy Policy of 5-Minute Crafts. Your privacy matters to us, and this Policy explains what information we collect, why we use it, how long we keep it, who may process it on our behalf, and the choices available to you. 5-Minute Crafts is owned and operated by ADME (CY) LTD, with its registered office at 62 Agiou Athanasiou Avenue, BG WAYWIN PLAZA, Office 101, Limassol 4102, Cyprus. ADME (CY) LTD is the data controller for the processing described in this Policy.

1. Information We Collect

When you visit the Website, we may receive technical information such as your IP address, browser and operating-system details, an approximate country derived from trusted request information, referring pages, timestamps, security logs, cookie identifiers, and activity within the Website and content feed.

If you create an account, we collect your email address, password credentials in protected form, and display name. You may later add a profile image. We do not currently ask for gender or date of birth during registration. If you choose Google sign-in, Google provides the account information needed to authenticate you in accordance with your settings and Google's policies.

We also process information you choose to provide or create, including comments, reactions, saves, boards, uploaded realizations, reports, and messages sent through the contact form or by email. Contact correspondence may include your name, email address, subject, message, and any other information you choose to include.

We use Google Analytics to understand aggregated Website usage. Advertising networks, LiveRamp, Finteza, Yandex Metrica, DoubleClick advertising, and similar advertising or identity services described as future possibilities below are not active on the Website as of the date of this Policy.

2. How We Use Information

We use personal information to provide and secure the Website; authenticate accounts; deliver requested features; display and moderate community contributions; respond to messages; prevent fraud, spam, and abuse; maintain service reliability; understand Website performance; improve content and functionality; comply with law; and establish, exercise, or defend legal rights.

We may also use Website activity to count visits, understand which areas and projects are useful, avoid repeatedly showing the same content, and personalize the feed as explained below. Transactional emails may be sent for account verification, password recovery, security, or responses to requests. If optional marketing communications are introduced, they will include an appropriate unsubscribe method.

3. How the Feed Personalizes What You See

What the feed records

  • Impressions — which cards were shown to you, including the craft and the way it was presented, so the same items are not repeated. When you are signed in, this can carry across your devices; when you are logged out it is limited to the browser you are using.
  • View history — which crafts you opened, so the feed can reduce repeats automatically.
  • Engagement — for signed-in accounts, actions such as save, react, comment, share, start making, watch, or open may contribute to general category and topic interests. Stronger signals, such as saving or making, may count for more.

What it is used for

  • Avoiding repeats — the feed avoids re-showing content you have already seen or opened. This is active for everyone.
  • Ordering by interest — interest-based ordering is currently limited to staff accounts while it is evaluated. It may later be enabled for some or all signed-in users. It is never used for logged-out visitors.

For logged-out visitors, feed activity is tied to an anonymous cookie set in the browser, not to a name, email address, or account. Anonymous feed activity is deleted 365 days after your last activity; the window refreshes when you return. Signed-in activity is generally kept while the account remains active or as otherwise needed for the purposes described in this Policy.

Repeat-avoidance runs automatically. You can review what you opened, remove individual entries, or clear the list from your history page.

4. Legal Bases and Your Choices

Depending on the processing and your location, we rely on one or more legal bases: performing a contract with you, our legitimate interests in operating and improving the Website, compliance with a legal obligation, protection of vital interests, or your consent. Where processing depends on consent, you may withdraw that consent without affecting processing that already took place lawfully.

A Website-level cookie consent and update-consent tool is planned but is not currently available. Until it is introduced, you can manage cookies through your browser and can contact [email protected] about consent or privacy choices. Some features may not work correctly if required storage is disabled.

5. With Whom We Share Information

We do not sell personal information or share it for cross-context behavioural advertising at present. We disclose information only as described here: to service providers that help us host, store, secure, analyze, authenticate, and operate the Website or deliver email; within our corporate group where necessary for these purposes; when required by law; to protect users, our rights, or the security of the Services; or as part of a merger, reorganization, financing, or transfer of assets.

Service providers may process limited information under their own contractual and legal obligations. Current categories include hosting and database infrastructure, media storage and delivery, email delivery, Google Analytics, Google authentication when selected by the user, and privacy-conscious error monitoring.

We plan to support on-site advertising in the future. If advertising, personalized advertising, or identity services are introduced, selected advertising networks and partners may process device, cookie, usage, or pseudonymous identity information to deliver and measure ads. LiveRamp or a comparable identity provider may be considered, but LiveRamp is not active today and we do not currently send it hashed email addresses or other user data. We will update this Policy, the Cookies Policy, partner disclosures, and applicable controls when the advertising stack is activated.

6. International Transfers

We and our providers may process information in countries outside the country where you live. Where the law requires safeguards for a transfer outside the EEA, we use an applicable adequacy decision, European Commission-approved Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary safeguards where appropriate.

7. How We Protect Information

We use reasonable technical, organizational, and procedural safeguards designed to protect information against accidental or unlawful loss, misuse, alteration, disclosure, or access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Cookies and Similar Storage

We use cookies and browser storage for security, sessions, feed continuity, preferences, and analytics. The current cookie list, planned advertising technologies, and browser controls are described in our Cookies Policy.

9. Future Advertising and Personalization

The Website does not currently operate a personalized advertising stack. We may introduce native advertising, ad measurement, frequency controls, and interest-based advertising in the future. Those services may use cookies, pixels, or similar technologies to understand ad interactions, measure effectiveness, prevent repeated ads, and build broad audience segments. They will not be treated as active until implemented, and this Policy will be revised to identify the actual partners, data categories, purposes, retention, and opt-out rights.

10. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing the Services, maintaining security and records, resolving disputes, and meeting legal obligations. Retention depends on the type of information and the applicable purpose. Anonymous feed activity has the specific rolling 365-day period described above. After a verified account-deletion request, account-linked information is deleted or de-identified unless continued retention is legally required or necessary to protect legal rights.

11. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information; withdraw consent; obtain a portable copy; and complain to a data-protection authority. You may also have the right to appeal a response to a privacy request.

Send requests to [email protected]. We may ask for information needed to verify your identity and authority. We aim to respond within the period required by applicable law, generally one month under GDPR, subject to permitted extensions. You normally will not be charged, although the law may permit a reasonable fee or refusal for manifestly unfounded or excessive requests.

12. Children's Privacy

The account and community Services are not intended for children under 13, and we do not knowingly collect personal information from a child below the minimum age permitted by applicable law without valid parental authorization. Where local law requires a higher age for independent consent, a parent or guardian must provide permission. If you believe a child provided personal information improperly, contact us so we can investigate and take appropriate action.

13. Brazilian Privacy Rights

If the Brazilian General Data Protection Law applies to you, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed information, portability where applicable, information about sharing, withdrawal of consent, review of qualifying automated decisions, and information about the consequences of refusing consent.

You can exercise these rights at [email protected] or by writing to the address in the Contact section. We may retain information where permitted or required by law even after a deletion request.

14. California Privacy Rights

California residents may have rights to know, access, correct, delete, and obtain information about the categories of personal information collected, sources, purposes, and recipients; to opt out of qualifying sale or sharing; to limit certain uses of sensitive personal information; and not to receive discriminatory treatment for exercising privacy rights.

In the preceding 12 months, the Website may have collected identifiers and account information, internet or electronic activity, approximate country information, user-created content, correspondence, and inferences used for signed-in feed interests. These categories are used for the operational purposes described in this Policy and may be disclosed to service providers. We do not currently sell these categories or share them for cross-context behavioural advertising. If planned advertising features change that position, we will update this disclosure and provide legally required opt-out methods before treating the activity as active.

15. Automated Decision-Making

The Website uses automated rules to reduce repeated feed items and may use interest signals to order content for eligible signed-in users. These features do not make decisions that produce legal or similarly significant effects. We do not currently use solely automated decision-making of that kind. If this changes, we will provide the disclosures and rights required by applicable law.

16. Questions and Complaints

For privacy questions, suggestions, unresolved concerns, or complaints, contact [email protected]. If you are in the EEA, you may also complain to the data-protection authority where you live or work, or where an alleged infringement occurred. We encourage you to contact us first so we can try to resolve the issue.

17. External Links

The Website may link to or embed third-party websites, applications, or platforms. Their privacy practices are governed by their own policies. We do not control and are not responsible for those practices, and we encourage you to review the relevant third-party terms and privacy notices.

18. Changes to This Policy

We review this Policy as our Services, business practices, technology, and legal obligations evolve. Updated versions will be posted on this page with a revised date. Where required, we will provide additional notice or request consent before a material change takes effect.

19. Contact Us

Email [email protected] to ask a question or exercise a privacy right. You may also write to:

General CounselADME (CY) LTD62 Agiou Athanasiou Avenue, BG WAYWIN PLAZA, Office 101Limassol 4102, Cyprus