Privacy Policy

When account features are used, we process your email address, any name you provide, a password hash rather than your plain-text password, and account timestamps and status. Account activity records may include actions, timestamps and IP addresses for security and support. If you email us, we process your contact details and the information you include.

You can currently use the pattern tools as a guest. Account-linked export credits are planned and are not yet available through paid checkout.

We process the image files you upload to generate pattern previews and charts. Images may contain personal information, including recognizable people or embedded file metadata. Only upload images you have permission to use, and avoid including sensitive information that is not needed for your project.

Source images, generated previews and PDFs are stored in private cloud storage and served through authorized application routes. Uploading an image does not publish it in the public pattern library or authorize us to use it as a marketing example.

We store project identifiers, generation status, image and export file references, stitch dimensions, thread palettes, pattern grids, editing revisions, fabric settings, timestamps and technical error information. This lets us generate, reopen, edit, save and export your project.

Guest project access uses a random access token held in a browser cookie, with a hash stored alongside the project. Keep your browser access information private. Clearing that cookie can make a project inaccessible to you without deleting the stored project.

Paid export checkout is currently disabled. When purchases become available, PatternFable may receive order references, the purchased product or credit quantity, payment status, amounts, currency, billing contact information and refund or dispute records from the payment provider to fulfill and support the order.

PatternFable does not directly store full payment card details. Payment processing is handled by the third-party payment provider shown at checkout, which handles card details and may collect billing and fraud-prevention information under its own privacy policy. Creem is the planned provider for one-time export purchases.

We use essential cookies for signed-in sessions and guest project access. Signed-in session cookies have a one-day lifetime and can be renewed during use. Guest project-access cookies last up to 30 days. These cookies support authentication and access control; their expiry is not a storage-deletion schedule.

The current application does not include an optional analytics or advertising tracker. Hosting and infrastructure providers may process technical request logs, such as IP addresses, browser information, request times and errors, to operate and secure the service. If optional tracking is introduced, we will update this policy and obtain consent where required.

The footer loads badge images from PickApps and AppRater. Your browser sends those services the information normally needed to fetch an image, such as your IP address, browser information and any referrer information permitted by your browser. Clicking an external link takes you to a service governed by its own privacy policy.

We use data to provide pattern generation and editing, save and deliver files, manage accounts and project access, fulfill verified orders when payments are enabled, respond to support and deletion requests, diagnose failures, prevent abuse and meet applicable legal or accounting obligations.

Where applicable data-protection law requires a legal basis, processing may be necessary to provide the service you request, comply with legal obligations or pursue legitimate interests in operating and securing the service. We rely on consent where it is required for an optional use.

Account and project data are retained as needed to provide access, support and service operations, unless deletion is requested or another retention requirement applies. There is currently no fixed automatic deletion period for uploaded images or saved projects. A 30-day guest cookie does not mean your files are deleted after 30 days.

When payments are enabled, order and transaction records may need to be retained for tax, accounting, fraud prevention and dispute handling for the period required by applicable law. Some records may remain in restricted backups until those backups are rotated or expire. Deletion requests do not require removal of records we must lawfully retain.

Email patternfable@siqinai.com to request access, correction, deletion or information about your data. Depending on your location, you may also have rights to portability, restriction or objection, withdrawal of consent, or a complaint to a data-protection authority. We will handle requests in accordance with applicable law.

Include your account email or a project identifier and describe your request. We may ask for information needed to verify your identity or authority to access a guest project before disclosing or deleting data. Do not send your password, full card details or private access tokens by email. Deleting an account may not automatically identify every guest project; tell us which projects your request concerns.

We use service providers for hosting, database and private file storage, payment processing when enabled, and handling support communications. The current architecture uses Hostinger hosting and Supabase database/storage. Providers receive the information needed for their role and may process data under their own contractual and legal obligations.

We may disclose information when required by law or when necessary to address fraud, abuse or security incidents. External websites and payment providers have their own privacy practices; review their policies when you use those services.

The application uses measures such as hashed account passwords, signed session tokens, HttpOnly access cookies, private storage buckets and authorization checks for project files. No online system can guarantee absolute security. Protect your credentials and devices, and contact us if you suspect unauthorized access.

PatternFable can be accessed internationally. Your data may be processed in countries different from your country of residence, depending on hosting, storage and other provider locations. Where applicable law requires safeguards for international transfers, those requirements apply to the processing and providers involved.

We may revise this policy as features or data practices change and will update the date on this page. We will provide additional notice or seek consent for changes where required by law.