Privacy policy

This policy explains what information FlossGrid (cross-stitch-pattern-app.web.app) handles when you use it. The short version: the photos you turn into charts stay on your device, there are no accounts and no advertising, and we keep only anonymous, cookie-less page statistics.

Your photos and charts

When you load a photo into the pattern maker, your browser reads the file and does all the work itself: resizing, matching colors to the thread or bead palette, cleaning up stray stitches and drawing the chart. The photo is never uploaded to our servers or to anyone else, and the PNG or PDF you download is created on your device. The chart settings (craft, palette, width, number of colors) may appear in the page address so you can bookmark or share a setup; the photo itself never does.

Anonymous usage statistics

When a page loads, a small first-party script records an event containing the site name, the page path, the referring page (origin and path only, no query string), the event type, a timestamp and a random visit identifier. The event types are: page view, tool use (the first chart you generate on a page), Pro interest (opening the Pro dialog), checkout click (only once Pro is on sale) and waitlist sign-up. The visit identifier is generated in your browser, kept in session storage under mf-v (not a cookie), replaced every day and gone when you close the tab; it only lets us count distinct visits. The script sets no cookies and records no name, e-mail, photo or device identifier. These events are stored in Google Cloud Firestore, operated by Google as our processor, and are used only to understand which pages and features are useful. Like any web request, the connection exposes your IP address to the hosting and storage providers; we do not store it in the events.

Pro founder-price list

Your e-mail address is stored only if you submit it in the Pro dialog. Then we store that address, your optional answers (what would make Pro worth it and what you would pay), the site name, a timestamp and the random visit identifier, in Google Cloud Firestore. We use your address for one purpose only: to e-mail you once when Pro opens, with your founder price. We do not send newsletters, sell or share the list, and the list cannot be read from the website. To be removed, contact us through the contact page.

Data stored in your browser

The site keeps a few small values in your own browser. They are never sent to us, and you can remove them at any time by clearing this site's data.

• mf-theme (local storage): your light or dark mode choice, if you use the theme switch.
• pro, pro_session and pro_since (local storage): set only after a Pro purchase, so that Pro stays active in that browser; pro_session holds the checkout reference.
• Saved projects (IndexedDB, Pro only): the projects you choose to save, with their settings, kept in this browser only.

Payments

Pro is not on sale yet. Once it is, when you buy Pro, checkout happens on Stripe's secure pages. Stripe collects your payment details and your e-mail address and shares with us the information needed to provide receipts, refunds and support, such as your name, e-mail, the amount and the payment status. We never see or store your full card number. Stripe's own privacy policy applies to the data it processes.

Hosting

The site is served by Google Firebase Hosting, which processes standard request data such as IP address and user agent to deliver pages and protect against abuse. The site loads no third-party scripts, fonts or iframes.

Your rights

Depending on where you live you may have the right to access, correct or delete personal data we hold about you, which in practice is limited to a founder-price list entry and, once Pro is on sale, purchase and support records. Contact us through the contact page and we will respond within 30 days.

Related documents

The rules for using the site are in the terms of use; what Pro includes is on the pricing page; and who runs the site and where the color data comes from is explained on the about page.

Children

The site is a general-audience craft tool and does not knowingly collect personal information from children.

Changes

If this policy changes, the new version will be posted on this page with a new date.