Privacy
Privacy Policy
Effective: 2026-04-27
What we collect
- Email addresses when you save a pattern or subscribe to the newsletter. Stored in our database and Mailgun, our email delivery provider.
- Uploaded images when you use the converter. Held in Supabase Storage. Public patterns are publicly accessible; private patterns are restricted to your authenticated session and the email link sent to you.
- Hashed IP for rate-limiting anonymous uploads. We never store raw IP addresses; only a salted hash that resets when we rotate our salt.
- Analytics via Vercel Analytics (anonymous, cookieless) and Google Analytics 4, which uses first-party cookies to measure page views and traffic sources.
- Visit notifications. When you load a page, we send ourselves a real-time notification via Pushover, a third-party push service. It includes the page path, referrer, timezone, browser language, screen size, and any UTM campaign parameters — but no name, email, or IP address.
What we do not collect
- We do not sell your data.
- We do not use third-party advertising trackers.
- We do not train models on your images without separate opt-in consent.
Cookies
We use a session cookie for authentication (Supabase Auth) and first-party Google Analytics 4 cookies (_ga and _ga_*) to distinguish visitors across page views. We do not use cross-site advertising cookies.
Your rights
You may delete your account and all associated patterns at any time from your account settings, or by emailing hello@stitchinglab.com. You may unsubscribe from email at any time via the unsubscribe link in any email we send. You may request a copy of your data on request.
Affiliate disclosure
See the affiliate disclosure.