Privacy Policy

1. Overview

This policy explains what information StitchStash collects when you use the Service, how we use it, and the choices you have. We collect the minimum we need to run the product and don’t sell your information.

2. Information we collect

• Account information — your email address, managed via Supabase Auth.
• Photos and generated patterns — the images you upload, and the thread-matched charts, stitched previews, and PDFs generated from them, stored in our storage provider (Supabase Storage).
• Payment information — handled directly by Stripe. We receive confirmation that a payment succeeded and its amount, but never your card number.
• Inventory data — if you use the optional stash/inventory features, the thread brands, colors, and quantities you choose to record.
• Usage analytics — a small set of product events (e.g. a conversion started or completed, a PDF was downloaded, a payment succeeded) via PostHog, tied only to your internal account id — never your name, email, or uploaded images. We don’t use session recording, autocapture, or ad-tracking pixels.

3. How we use this information

We use the information above to:

• Generate and deliver your patterns and PDFs.
• Process payments and enforce the free-conversion limit.
• Send account-related email (confirming your email address, password resets, receipts).
• Understand and improve the product (e.g. which step of the conversion flow people drop off at) using the anonymized analytics described above.
• Automatically screen publicly shared content for inappropriate material.
• Detect and prevent abuse of the free tier or the Service.

4. Cookies

We use a session cookie to keep you signed in (set by Supabase Auth). We don’t use third-party advertising cookies or cross-site tracking.

5. Who we share information with

We share information only with the service providers that run StitchStash on our behalf, and only what each needs to do its job: Stripe (payments), Supabase (authentication, database, file storage), PostHog (anonymized product analytics), and our transactional email provider (account emails). We don’t sell your information or share it with advertisers.

If you choose to make a pattern or your stash public using the Service’s sharing controls, that content becomes visible to other visitors by design — that’s a feature you opt into, not information shared automatically.

6. Data retention and deletion

We keep your account, uploaded photos, and generated patterns for as long as your account is active. To request deletion of your account and associated data, email support@stitchstash.co.

7. Your rights

You can access or update your account information at any time from within the app. You can request a copy of your data or ask us to delete it by contacting us at the email above.

8. Children’s privacy

StitchStash isn’t directed at children, and we don’t knowingly collect information from anyone under 13 (or the relevant minimum age in your region).

9. Security

We use industry-standard measures to protect your information, including encryption in transit and row-level access controls on our database so your data is only ever readable by you (or, for content you’ve chosen to make public, by other visitors as intended). No method of storage or transmission is 100% secure, and we can’t guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll update the “Last updated” date above.

11. Contact

Questions about this policy? Reach us at support@stitchstash.co. See also our Terms of Service.