Privacy Policy

1. Introduction

StitchCraft (crossstitchpatternmaker.app), the data controller, operating under the trade name "StitchCraft", is an online cross stitch pattern maker: it turns photos into stitchable charts with real DMC floss colours, and offers optional AI tools that redraw or generate images before conversion. This policy explains what information we collect, how we use it, and the rights you have. We take your privacy seriously and keep collection minimal — everything below exists because the service genuinely needs it.

2. Information We Collect and Process

We group the little we collect into five categories:

• Account information. Your email address; your name and avatar if you sign in with Google or GitHub; a salted hash instead of your password if you choose email sign-in.
• Generation data. The photos, prompts and instructions you submit when using the AI tools, and the charts and results produced for you.
• Task records. For each AI run: the tool you chose and its settings, the status and timing, and the credits consumed. Signed-in runs are linked to your account.
• Billing records. The plan or pack you bought, the amount, the currency, and the payment provider's transaction identifier. Card numbers never reach our servers.
• Technical and security data. Server logs and standard request information (such as IP address and browser type), used to keep the service secure and prevent abuse. Google Analytics collects aggregate usage events (pages and features used); we do not build advertising profiles.

We also use a small number of first-party cookies — a session cookie, a locale cookie, a free-trial cookie and a utm_source cookie — and no advertising cookies.

3. How We Use Information

We use the information above to:

• deliver the photo-to-chart conversion and the AI tools you ask for;
• create and authenticate accounts and keep you signed in;
• process orders, credit grants and balances;
• prevent abuse of the free tier, rate limits and payment;
• answer your support requests, including in-app tickets, which keep their message history;
• understand aggregate usage so we can improve the service.

What we never do: we do not train, fine-tune or evaluate any model on your photos; we do not sell, rent or trade your photos or personal information; and we do not use your photos in marketing, sample galleries or demos — every before/after image on this site was generated from scratch by us.

4. How Data Is Shared

We share data only with the services needed to run StitchCraft:

• AI model providers — they process the photo or prompt you submit to an AI run to produce your result.
• Cloudflare — hosting and object storage for uploads and results.
• Payment providers — Stripe, Creem, Waffo Pancake, PayPal, Alipay or WeChat Pay, depending on the method you choose at checkout.
• Resend — transactional email (sign-in and receipt messages).
• Google Analytics — aggregate usage analytics.

We may also disclose information to comply with a lawful request from a public authority, or to protect the rights, property or safety of StitchCraft or its users.

5. Data Retention

Uploaded photos, generated results and task records are kept while your account exists, so your history and downloads keep working — and for nothing else. The free anonymous run is kept only as a temporary task record. Billing records are kept as long as tax and accounting rules require. Deleting your account removes the account record and the task history attached to it.

6. Security Measures

All traffic travels over encrypted HTTPS connections. Passwords are stored only as salted hashes, and storage credentials and provider API keys live in server-side configuration, never exposed to the browser. We apply appropriate technical and organisational safeguards against unauthorised access, alteration or destruction of your data. If a breach of your personal data ever occurs, we will notify affected users and the relevant authorities without undue delay, and within 72 hours where the law requires.

7. Children's Privacy

StitchCraft is not directed at children under 13, and we do not knowingly collect personal information from them.

8. Changes to This Privacy Policy

If we change how information is handled, we will update this page and the date at the top. Material changes will also be announced in the app before they take effect.

9. Your Rights

You can ask us to give you a copy of your data, correct it, export it or delete it, at support@crossstitchpatternmaker.app. Depending on where you live you may also have the right to object to processing or to lodge a complaint with your local data protection authority. Some data may be retained where needed for security, tax or legal compliance.

10. Contact

Questions about this policy: support@crossstitchpatternmaker.app.

11. Legal Basis

Where the GDPR or similar laws apply, we process account and billing data to perform our contract with you, and the minimal technical data described above on the basis of legitimate interests — operating, securing and improving the service while protecting your privacy.