← StitchSwift · Legal
Privacy Policy
Effective 26 July 2026
We collect what the service needs to work. There are no analytics scripts, no advertising cookies and no third-party trackers on this site. We never sell your data or your designs, and we do not use them to train models.
This policy explains what StitchSwift (“we”, “us”) collects when you use this site, why we collect it, how long we keep it and what choices you have.
1. What we collect
- Account details. When you sign in with Google we receive your email address, a Google account identifier and, if your Google profile has them, your name and picture. We never receive your password.
- Your artwork and output files. The images you submit, and the machine files, vector artwork, previews, thread lists and reports we generate from them.
- Design settings and results. The machine, hoop, fabric, colour limit and size you chose, plus the validation results for each design.
- Sew-out records. If you record a physical sew-out, the rating, notes and any photographs you upload of the stitched result.
- Credits and purchases. Your balance and an append-only ledger of every credit movement. Payments are processed by Stripe; card numbers never reach our servers. We keep only a reference to the Stripe session.
- An activity trail.A record of significant actions — a design created, approved, deleted, credits granted or spent — used for support and to answer “what happened to this design?”. It never contains image data.
2. Cookies
We set two first-party cookies, both strictly necessary and neither readable by page scripts: stitch_session, which keeps you signed in for 30 days, and stitch_oauth, which protects the sign-in handshake and lasts 10 minutes. There are no advertising cookies, no analytics scripts and no third-party trackers.
3. How we use it
- To run the service: convert artwork, show previews, deliver files, keep your balance.
- To take payment and to prevent fraud and abuse.
- To answer support questions about your own designs.
We do not sell your data, show you advertising, or use your artwork or output to train models or to build a template library.
4. AI processing
New designs automatically enable an artwork cleanup step that may run on a third-party AI provider (OpenAI). Artwork is sent only when automated cleanup is required. Only the artwork and production context needed to perform that cleanup are sent.
We send the artwork and the minimum instructions the step needs. We do not send your name, email address or account identifiers with it.
5. How long we keep things
- Artwork and generated files: removed automatically 30 days after a design was last worked on. You can also delete a design yourself at any time, which removes the uploaded artwork and every file derived from it straight away. Download what you need before the period is up; re-running a design later costs credits again.
- Account, balance and credit ledger: kept while your account exists, and afterwards where tax and accounting law requires.
- Activity trail: kept as the record of what happened to an account, and retains no image data.
6. Who we share with
Only the providers the service runs on, each receiving only what its role requires: Google for sign-in, Stripe for payments, our hosting and storage providers, and — when automated artwork cleanup is required — the AI provider that performs that step. We disclose data beyond this only where the law compels us.
7. Your choices
You can export a design’s full record, including its settings, history and file manifest, and you can delete a design and its files from your workspace. Email [email protected] to access, correct or delete your data, or to close your account. Depending on where you live — the EU/EEA, the UK or California, for example — you may have further statutory rights; we honour reasonable requests regardless of where you are.
8. Security
Traffic is encrypted in transit. Session cookies are signed and cannot be read by page scripts. Every lookup in our systems is scoped to your workspace, so one account cannot reach another’s designs. Payment card data is handled entirely by Stripe.
9. Children
The service is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has used the service, contact us and we will delete the account.
10. Changes
If this policy changes materially we will post the new version here and update the date above.