- Your cart is empty
- Continue shopping
StateCrafted Privacy Policy
Colorado’s Verified Marketplace for Local Makers
| Effective Date: | June 1, 2026 |
| Last Updated: | June 1, 2026 |
| Applies To: | statecrafted.co and all associated mobile and web applications |
| Administered By: | StateCrafted LLC, Denver, Colorado |
| Contact: | hello@statecrafted.co | StateCrafted LLC, Denver, Colorado |
This Privacy Policy describes how StateCrafted LLC (“StateCrafted,” “we,” “our,” or “us”) collects, uses, shares, and protects personal information when you visit our website, use our platform, or interact with our services. It applies to all users of the StateCrafted marketplace, including buyers, sellers (makers), and visitors.
Please read this policy carefully. By using StateCrafted, you agree to the practices described below. If you do not agree, please do not use our services. This policy should be read alongside our Terms of Service and Seller Agreement, which together govern your use of the StateCrafted platform.
1. Information We Collect
We collect information in three ways: information you provide directly, information collected automatically, and information we receive from third parties.
1.1 Information Provided by Buyers
When you create a buyer account or make a purchase on StateCrafted, we may collect:
- Full name
- Email address
- Shipping and billing address
- Payment information (processed securely by Stripe — we do not store card numbers)
- Account password (stored in encrypted form)
- Communications you send to sellers or to us
- Reviews and ratings you submit
1.2 Information Provided by Sellers (Makers)
As part of our verification process, sellers are required to submit documentation to confirm Colorado ownership, production location, and material sourcing. This may include:
- Full legal name and business name
- Colorado business registration number or Colorado-issued government ID (driver’s license or state ID)
- Business address and studio or workspace address
- Workspace photos and production process documentation
- Supplier documentation and invoices demonstrating Colorado-sourced materials (for Tier 3 verification)
- Tax identification number (for payment reporting purposes)
- Bank account information (processed via Stripe for payout purposes)
- Profile content including bio, product listings, photos, and descriptions
- Communications with us and with buyers
Verification documents are reviewed manually by StateCrafted and stored securely. We collect only what is necessary to verify your eligibility and maintain platform integrity.
1.3 Information Collected Automatically
When you visit or use the StateCrafted platform, we automatically collect certain technical information, including:
- IP address and general location (city/region level)
- Browser type and version
- Device type and operating system
- Pages visited, links clicked, and time spent on the platform
- Referring URL (how you arrived at our site)
- Search queries made within the platform
This information is collected through cookies, web beacons, and similar technologies. See Section 6 for more detail.
1.4 Information from Third Parties
We may receive information about you from third-party services, including:
- Stripe: payment confirmation and fraud signals
- Google Analytics: aggregated usage and traffic data
- Meta (Facebook/Instagram): advertising performance data when you interact with our ads
- Customer.io: email engagement data (opens, clicks)
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 To Operate the Platform
- Create and manage your account
- Process purchases and subscriptions
- Facilitate transactions between buyers and sellers
- Deliver order confirmations, receipts, and shipping notifications
- Conduct seller verification and issue verification badges
2.2 To Communicate With You
- Send transactional emails (receipts, account updates, verification status)
- Send platform announcements and policy updates
- Respond to your inquiries and support requests
- Send marketing emails, if you have opted in (you may opt out at any time)
2.3 To Improve Our Services
- Analyze how users interact with the platform
- Identify and fix technical issues
- Develop new features and improve existing ones
- Conduct internal research and analytics
2.4 To Maintain Trust and Safety
- Verify seller eligibility and Colorado credentials
- Detect, investigate, and prevent fraudulent activity
- Enforce our Terms of Service and Seller Agreement
- Comply with applicable laws and legal obligations
2.5 To Market StateCrafted
- Display targeted and interest-based ads on third-party platforms (e.g., Facebook, Instagram, Google), if you have not opted out
- Measure the effectiveness of our marketing campaigns
We do not sell your personal information to third parties for their own marketing purposes.
3. How We Share Your Information
We share personal information only in the circumstances described below. We do not sell personal data.
3.1 Between Buyers and Sellers
When a buyer places an order, we share the buyer’s name, shipping address, email address, and order details with the relevant seller so they can fulfill the order. Sellers are required under our Seller Agreement to use this information solely for order fulfillment and not to add buyers to mailing lists or use buyer data for independent marketing without explicit consent.
3.2 Service Providers
We share information with trusted third-party vendors who help us operate the platform. These providers are contractually bound to use your data only as directed by us and in accordance with this policy:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing and seller payouts | Payment info, bank details |
| Customer.io | Email marketing and automation | Name, email, behavior |
| SendGrid | Transactional email delivery | Name, email address |
| Google Analytics | Platform usage analytics | Anonymized usage data |
| Google Workspace | Internal communications and document storage | Internal data only |
| Meta (Facebook/ Instagram) | Advertising and campaign measurement | Hashed email, pixel data |
| Notion / Airtable | Internal project management and seller pipeline | Seller contact info |
3.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StateCrafted, our users, or the public.
3.4 Business Transfers
If StateCrafted is acquired, merged with another company, or undergoes a change in ownership, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
4. Seller Obligations Regarding Buyer Data
When you sell on StateCrafted, you receive personal information about buyers (such as name, address, and email) in connection with their orders. As a seller, you agree to:
- Use buyer information only to fulfill the specific order for which it was provided
- Not add buyers to email lists or contact them for marketing purposes without their explicit consent
- Not share, sell, or otherwise disclose buyer information to third parties
- Handle buyer data in accordance with applicable privacy laws
- Delete buyer personal information when it is no longer needed for order fulfillment
Violations of these obligations may result in suspension or termination of your StateCrafted seller account.
5. Cookies and Tracking Technologies
5.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function (login sessions, shopping cart, security)
- Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics)
- Marketing cookies: Used to serve relevant ads on third-party platforms (e.g., Meta Pixel)
- Preference cookies: Remember your settings and preferences
5.2 Your Cookie Choices
You may manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the platform. You may also opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info) or by adjusting settings within your Meta or Google account.
We will request your cookie consent when you first visit the platform, in accordance with applicable law.
6. Data Security
We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards, including:
- Encryption of data in transit (TLS/HTTPS)
- Secure, access-controlled storage of verification documents
- Payment processing exclusively through Stripe, which is PCI-DSS compliant — StateCrafted does not store payment card numbers
- Limited internal access to personal data on a need-to-know basis
- Regular review of security practices as the platform grows
No system is completely secure. While we work to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at hello@statecrafted.co.
7. Data Retention
We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.
- Buyer account data: Retained while your account is active and for 3 years after closure
- Seller verification documents: Retained for the duration of your active seller account plus 5 years, to support any disputes or compliance audits
- Order records: Retained for 7 years for tax and accounting purposes
- Marketing data: Retained until you opt out or withdraw consent
- Anonymized analytics: May be retained indefinitely
You may request deletion of your account and personal data at any time (see Section 8). Some information may be retained for legal or legitimate business purposes even after deletion is requested.
8. Your Privacy Rights
Depending on where you live, you may have certain rights regarding your personal information.
StateCrafted respects these rights and provides mechanisms to exercise them.
8.1 Rights for Colorado Residents (Colorado Privacy Act)
The Colorado Privacy Act (CPA), effective July 1, 2023, grants Colorado residents the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Request that inaccurate personal data be corrected
- Right to Deletion: Request that we delete your personal data
- Right to Data Portability: Receive a copy of your data in a portable format
- Right to Opt Out: Opt out of the sale of personal data, targeted advertising, or profiling
To exercise any of these rights, email us at hello@statecrafted.co with the subject line “Privacy Rights Request.” We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, email us at hello@statecrafted.co with the subject line “Privacy Rights Request.” We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.
9. Children’s Privacy
StateCrafted is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@statecrafted.co and we will take steps to delete that information.
In accordance with Colorado Privacy Act amendments effective October 1, 2025, we will not process the personal data of users under 18 for targeted advertising or profiling without verifiable parental consent.
10. Third-Party Links and Seller Storefronts
The StateCrafted platform may contain links to third-party websites, social media profiles, or external seller websites. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
Individual seller storefronts on StateCrafted are operated by independent makers. While sellers are required to comply with our Seller Agreement regarding buyer data, their independent websites or social media accounts are governed by their own privacy practices.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:
- Post the updated policy on this page with a new “Last Updated” date
- Send an email notification to registered users at the email address associated with their account
- Display a notice on the StateCrafted platform for a reasonable period following the update
Your continued use of StateCrafted after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the changes, you should discontinue use of the platform.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
| hello@statecrafted.co | |
| Subject Line | “Privacy Inquiry” or “Privacy Rights Request” |
| Mailing Address | StateCrafted LLC, Denver, Colorado |
| Response Time | We aim to respond to all privacy inquiries within 10 business days. |