Privacy Policy

Effective Date: October 10, 2026 | Last Updated: October 16, 2026

Welcome to Craft Pass. This Privacy Policy explains how Craft Pass LLC (“Craft Pass,” “we,” “our,” or “us”) collects, uses, shares, and protects your personal information when you visit our website at mycraftpass.com, create an account, save workshops, set reminders, turn on notifications, submit a workshop listing as an organizer, sign up for our email or SMS communications, purchase tickets to events Craft Pass hosts, or otherwise interact with our services (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

This Privacy Policy is intended to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable privacy laws.

1. Information We Collect

We collect the following categories of personal information, depending on how you interact with our Services:

a. Information You Provide Directly

Contact Information: First name, last name, email address, and phone number
Account Information: Your name, username, email address, phone number, optional ZIP code, password and account type (member or organizer) when you create a Craft Pass account. Passwords are handled by our sign-in provider, Supabase, and stored only in encrypted (hashed) form; Craft Pass never sees your password
Consent Records: Whether you chose to receive marketing emails and when you accepted our Terms & Conditions and this Privacy Policy
Saved Workshops and Reminders: The workshops you save and the reminders you set, including when you want to be reminded
Notification Settings: If you turn on push notifications, a device subscription your browser creates so we can send notifications to that device. It identifies your browser on that device, not you personally
Organizer Information: If you list workshops, your business name, contact details, social links, profile details and the workshop information and images you submit
Ticketing Data: Information provided when purchasing tickets to events Craft Pass hosts itself through Ticket Tailor
Payment Information: Payment card details processed securely through Stripe. Craft Pass does not store your full payment card information — this is handled by Stripe’s encrypted payment infrastructure
Event Participation Data: Workshop preferences, attendance history, and any information you voluntarily share when registering for or attending Craft Pass events
Communications: Messages, feedback, or inquiries you send to us directly

b. Information Collected Automatically

Location You Choose to Share: If you include a ZIP code in a search, that ZIP code is sent to our location lookup to find nearby workshops. If you choose a distance without entering a ZIP code, your browser asks whether to share your approximate position with the page so it can measure distances; that position is used only on that page and is not sent to or stored by Craft Pass
Usage Data: Pages visited, time spent on site, links clicked, and other interaction data, including which workshops you view, save or share and when you click “Book Now”
Device Information: Browser type, operating system, IP address, and device identifiers
Cookies and Tracking Technologies: We use Google Analytics and similar tools to understand how visitors use our website. See Section 7 (Cookies and Tracking) for more detail

c. Information About Minors

Craft Pass events are open to attendees of all ages when accompanied by a parent or guardian. In the event a ticket is purchased for a minor, we may collect the minor’s first name, last name, phone number, and email address solely for the purpose of event administration and communication. We do not use a minor’s information for marketing purposes without verifiable parental consent.

If you believe we have inadvertently collected personal information from a minor without appropriate consent, please contact us immediately at the contact information provided in Section 12.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

To create and secure your account and keep you signed in
To show you your saved workshops and send the reminders you set by email and, if you turn them on, push notification
To review, publish and manage workshop listings submitted by organizers
To process ticket purchases and manage registrations for events Craft Pass hosts, through Ticket Tailor
To send transactional emails and event confirmations
To understand which areas our community lives in and searches from, so we can bring more workshops closer to them. We count the ZIP codes people search for without linking them to any account, and we look at sign-up ZIP codes only as totals by area
To learn what people look for and how far they travel: which categories, price ranges and distances they pick, and how far the workshops they click or book are from the ZIP code they searched. We use these as totals, not to profile individuals, and we share listing totals (views, saves, shares and booking-link clicks) with each organizer
To keep an up-to-date record of account holders and their email preferences in our email platform (Mailchimp). Every account is added there so we can honor your choices, but you receive marketing emails only if you opted in
To send marketing emails, newsletters, and SMS messages through Mailchimp (with your consent)
To process payments securely through Stripe
To analyze website traffic and user behavior through Google Analytics to improve our Services
To respond to your inquiries, questions, or support requests
To comply with applicable laws, regulations, and legal obligations
To protect the safety, security, and integrity of our Services and users
To develop and improve our products, services, and event offerings

3. How We Share Your Information

Craft Pass does not sell your personal information to third parties. We may share your information in the following limited circumstances:

a. Service Providers

We share your information with trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your data and use it only for the purposes we specify:

Supabase — account sign-up, sign-in and account profile storage
Base44 — website hosting and storage of workshop listings, saved workshops, reminders and notification settings
Brevo — delivery of reminder and account emails
Mailchimp — email marketing, SMS messaging and records of email preferences
Google Analytics — website analytics and performance tracking
OpenStreetMap (Nominatim) — turning ZIP codes and workshop addresses into map locations for distance searches and maps. Only the ZIP code or address is sent, never your name or account details
OpenStreetMap map tiles — displaying the maps on workshop pages and in map view. Your browser loads the map images directly from OpenStreetMap, which receives your IP address as part of that request
Browser push services (for example, those operated by Google, Apple and Mozilla) — delivery of push notifications to devices where you turned them on
Ticket Tailor — ticketing and registration for events Craft Pass hosts
Stripe — payment processing for events Craft Pass hosts

b. Event Hosts and Artisans

Most workshops on Craft Pass are run by independent organizers. When you click “Book Now,” you leave Craft Pass and book directly with the organizer or their ticketing provider, and their own privacy policy applies to the information you give them. Saving a workshop or setting a reminder does not share your information with the organizer.

For events Craft Pass hosts itself, we may share limited attendee information (such as first name and attendance confirmation) with the artisan or host facilitating a workshop you have registered for, solely for the purpose of coordinating your participation in that event.

c. Legal Requirements

We may disclose your personal information if required to do so by law, court order, or government authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Craft Pass, our users, or others.

d. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if such a transfer occurs.

4. Your California Privacy Rights (CCPA / CPRA)

As a California-based business serving California residents, we are subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). California residents have the following rights regarding their personal information:

a. Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it was collected, and the categories of third parties with whom it was shared.

b. Right to Delete

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions (such as when the information is needed to complete a transaction, comply with a legal obligation, or detect security incidents).

c. Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

d. Right to Opt-Out of Sale or Sharing

Craft Pass does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising.

e. Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information, you have the right to limit our use of such information to purposes permitted by the CPRA.

f. Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge different prices, or provide a different quality of service because you exercised a right under this policy.

To exercise any of these rights, please submit a verifiable consumer request to us using the contact information in Section 12. We will respond to your request within 45 days, or notify you if we need an extension.

5. Email, SMS and Push Notifications

Reminders. If you set a reminder for a workshop, we send it by email and, if you have turned them on, by push notification at the time you chose. You can see and cancel your upcoming reminders at any time under My Reminders on your Saved Workshops page. You can turn push notifications off at any time in your browser or device settings.

Account emails. We send emails needed to run your account, such as password resets.

Marketing. Marketing emails are optional. When you sign up you can choose whether to receive them, and you can change your mind at any time.

By opting in to our email list or providing your phone number for SMS, you consent to receive marketing emails and SMS messages from Craft Pass about upcoming events, promotions, and updates.

You may opt out of marketing communications at any time by:

Clicking the “Unsubscribe” link in any marketing email
Replying “STOP” to any SMS message
Contacting us directly at the information in Section 12

Please note that even if you opt out of marketing communications, you may still receive transactional messages related to ticket purchases or events you have already registered for.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we take reasonable steps to delete or anonymize it.

Specifically:

Account information, saved workshops, reminders and notification settings are kept while your account is open. You can remove saved workshops, cancel reminders and turn off notifications yourself at any time, and you can ask us to delete your account using the contact information in Section 12
Event registration and attendee data for events Craft Pass hosts is retained for up to three (3) years following the event date
Payment transaction records are retained as required by applicable financial regulations
Marketing opt-in and communication records are retained until you opt out, after which we retain suppression records to honor your preferences

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and analyze how our site is used. A cookie is a small data file stored on your browser or device.

We use the following types of cookies:

Essential Cookies: Necessary for the basic functionality of our website
Analytics Cookies: Used by Google Analytics to collect aggregate information about site traffic and usage patterns. Google Analytics may use cookies to track your interactions across sessions. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout
Marketing Cookies: Used to deliver relevant event and promotional content

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. Data Security

We take the security of your personal information seriously and implement commercially reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

Account sign-in is handled by Supabase, and passwords are stored only in hashed form. Changes to your account data go through checks that confirm you are signed in as the account owner.

Our third-party service providers, including Stripe for payment processing, maintain their own industry-standard security practices. Stripe is PCI-DSS compliant, and we do not store full payment card numbers on our systems.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

9. Third-Party Links

Our website and communications may contain links to third-party websites, platforms, or services that are not operated by Craft Pass. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over and assume no responsibility for the content, privacy practices, or conduct of such sites.

10. Children’s Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent in compliance with the Children’s Online Privacy Protection Act (COPPA).

When a ticket is purchased for a minor (under 18) to attend a Craft Pass event, we may collect limited information about the minor (such as name and contact information) solely for event administration purposes, as described in Section 1(c). We do not use minors’ information for marketing purposes.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately so we can delete such information.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by:

Posting the updated policy on our website at mycraftpass.com with a revised “Last Updated” date
Sending an email notification to the address associated with your account or subscription

Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Craft Pass LLC
Website: mycraftpass.com
Email: customerservice@mycraftpass.com
Mailing Address: Inglewood, California

For California residents submitting a CCPA/CPRA request, please indicate “California Privacy Request” in the subject line of your communication. We will respond within 45 days of receipt of a verifiable request.