Privacy Policy

Policy version 2026-07-31.2 · Effective date: July 31, 2026

Stitched Patterns is a service of Rendered Craftworks LLC, a Minnesota limited liability company ("Rendered Craftworks," "we," "us," or "our"), and provides an app and website that turn a written description into AI-generated artwork and a printable, DMC-color-matched cross-stitch pattern. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

Email address. Used to sign you in via a one-time magic link and to send you transactional emails (sign-in links, gift notifications, purchase confirmations, deletion confirmations). We don't use passwords.
Account activity. The patterns you generate, purchase, favorite, or share are tied to your account so you can access them later. This includes the subject/description text you enter, the AI-generated artwork, and the finished pattern files.
Purchase, gift, subscription, and credit records. If you buy or gift a pattern, subscribe to Premium, or redeem a monthly Gallery credit, we record the transaction (pattern, price or credit use, date) and, for gifts, the recipient's email address. A short-lived record is also kept while a purchase is in progress so we can match it to the store's confirmation. We do not collect or store your payment card details ourselves — payments are processed by our payment providers (see below).
Generation usage. A count of your AI pattern generations is kept to enforce the free-tier lifetime limit and Premium's monthly Gallery-credit allowance.
Gallery submission consent and provenance records. If a pattern is published to the public Gallery, we record that the current policy version was accepted (context, account, timestamp), and whether the underlying prompt was an unmodified curated Pattern Idea or a custom/modified one, since that determines whether sharing defaulted on or off.
A single session cookie. An essential, HTTP-only cookie that keeps you signed in. We don't use advertising or cross-site tracking cookies.
Basic site-traffic analytics. Our hosting provider, Cloudflare, collects aggregate, privacy-focused web analytics (page views and basic traffic metrics) via its Web Analytics "beacon" script loaded on our pages. This does not use cookies or track you across other websites. See "Third Parties We Work With" below.
Device, network, and security log data. Standard technical data (such as IP address, general device/browser information, and request logs) is processed by our hosting provider, Cloudflare, to serve the Service and protect against abuse. Some of these operational logs (from the backend service that builds your pattern files) are configured to be persisted by Cloudflare rather than only processed in the moment, so we can diagnose problems after the fact — these logs record technical details like timing and status, not your prompt text, account email, or file contents.

We do not sell your personal information, and we do not use cross-context behavioral advertising.

How We Use Information

To generate your artwork and pattern (your description is sent to our AI image provider solely to create that image).
To operate your account, process purchases, gifts, and subscriptions, and deliver your pattern files.
To enforce free-tier and Premium usage limits.
To publish a pattern to the public Gallery according to the sharing default and disclosure described in "The Pattern Gallery" below.
To send you transactional emails related to your account, purchases, gifts, and account deletion.
To maintain the security and reliability of the service, and to understand aggregate site traffic.

The Pattern Gallery

Whether Gallery sharing defaults on or off depends on where your generated artwork came from: a pattern generated from an unmodified curated "Pattern Idea" prompt defaults to sharing (clearly disclosed beforehand, and you can turn it off before publication); a pattern generated from a custom prompt, or a curated prompt you changed the wording of, defaults to private, and publishing it requires an affirmative action from you. Either way, publication requires acknowledging our Terms of Service and this Privacy Policy, and — because publishing is a permanent decision (see our Terms of Service, Section 9) — an additional acknowledgement that the listing cannot later be removed at your request. We record that acceptance (policy version and timestamp, tied to your account) so publication can't happen without it, even if a request is missing, forged, or references an old policy version. If a pattern isn't published, it's still generated normally and privately. Once published, only the pattern's image, title, and theme are shown publicly; your account and email address are never displayed alongside a shared pattern, and deleting your account later does not remove the published listing (see "Data Retention" and our Delete Account page).

Third Parties We Work With

We share the minimum information necessary with the following providers, each acting on our behalf to operate the service, and only to the extent our current app actually uses them:

OpenAI — generates the artwork from your description. Your prompt text and, where used, an enhanced version of it, are sent to OpenAI's API solely to produce that image. We don't control OpenAI's own data-retention practices for API requests and don't promise a specific retention or training behavior on their behalf — OpenAI's own published API data-usage documentation (currently at developers.openai.com/api/docs/guides/your-data, not OpenAI's separate consumer ChatGPT privacy policy) is the authoritative, current source for exactly how long API inputs/outputs are retained and whether they're used for model training; those terms are OpenAI's to set and may change, so we point you there rather than restate a specific number that could go stale.
RevenueCat — manages subscription and purchase entitlements across our website and native iOS/Android apps. Most web (browser-based) purchases and subscriptions are processed through RevenueCat's own Web Billing checkout, which in turn uses Stripe as its underlying payment processor. This is a distinct arrangement from a subscription billed directly through Stripe (see below) — RevenueCat merely tracks entitlement for that kind, it doesn't process the payment itself.
Stripe — processes card payments. For a RevenueCat Web Billing subscription, Stripe is RevenueCat's own backing payment processor. Some subscriptions may instead be billed directly through Stripe outside of RevenueCat Web Billing, in which case Stripe (not RevenueCat) is the party actually managing that billing relationship. Either way, Stripe handles your payment details directly; we never see or store your card number.
Apple (App Store) and Google (Play Store) — process purchases and subscriptions made inside our native iOS and Android apps, under their own respective privacy and billing terms.
Resend — delivers our transactional emails (sign-in links, gift notifications, receipts, deletion confirmations).
Cloudflare — hosts our website, database, and file storage (Pages, D1, R2, Workers), and provides basic aggregate web analytics and security/abuse protection.

Beyond the service providers listed above, we don't share your information with other third parties, except in the following limited circumstances:

when required to by law, court order, or valid legal process;
to protect our users, the Service, or our rights and safety, or to investigate or prevent fraud or abuse;
with professional advisers (such as lawyers, accountants, or auditors) who are themselves bound by confidentiality obligations;
in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale or transfer of some or all of our business or assets, with notice and appropriate protection for your information where required by law;
with an additional service provider, only when reasonably necessary to operate the Service, and only under contractual restrictions that limit their use of your information to providing that service to us.

We do not authorize service providers acting on our behalf to use Service data for their own marketing purposes. Where a third party (such as Apple, Google, Stripe, or RevenueCat) separately collects or holds your information under their own account with you — for example, your App Store or Play Store purchase history — that data is governed by their own independent privacy practices, which we don't control, separate from our own service arrangement with them; see their own privacy policies for that information.

Data Retention

We keep your account information and generated patterns for as long as your account is active, so you can access your purchase and generation history. Purchase, gift, subscription, and Gallery-consent/provenance records may be retained after a deletion request where needed for another account's access to a pattern they own or claimed, or for tax, fraud-prevention, or legal-compliance purposes. A pattern you've published to the Gallery remains available permanently (see "The Pattern Gallery" above and our Terms of Service, Section 9) even after your account is deleted, though unnecessary public account attribution is removed or anonymized. Deleting your account does not, by itself, cancel a native Apple or Google subscription — those continue billing until managed through the originating store. An active RevenueCat Web Billing subscription has its future renewal canceled through RevenueCat's own systems as part of the deletion process. A subscription billed directly through Stripe outside of RevenueCat Web Billing is handled differently — we don't currently have an automated way to cancel that kind of subscription as part of account deletion, so deletion stops at a safe point and you're given a Stripe billing support path instead of proceeding with billing left unexpectedly active. Private generated artwork/PDF files created after our per-account file-tracking system went live are permanently deleted from storage as part of the deletion process; files generated before that tracking existed are removed from your account's own access but may not be reliably locatable for physical deletion. See our Delete Account page for the exact breakdown of what's deleted versus retained.

Children's Privacy

Stitched Patterns is not directed at children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian may use their own account to create patterns with or for a younger child; the adult remains the account holder. If you believe a child has provided us with personal information, please contact us and we'll delete it.

U.S. and International Processing

Our service providers process data in the United States and other countries where they operate. By using the Service, you understand your information may be processed outside your own country.

Your Choices

Whether a pattern generated from an unmodified curated Pattern Idea is published to the Gallery is disclosed before generation, and you can turn sharing off before publication; a custom or modified prompt is private unless you affirmatively choose to publish it. Either way, publishing is a permanent decision once made (see "The Pattern Gallery" above).
Depending on where you live and applicable law, you may have rights to request access to, correction of, or deletion of certain personal information. We may need to verify your identity, and legal exceptions may apply. To submit a request, contact us at [email protected] or visit our Delete Account page. If information or files are already available through your account, we may direct you to those self-service tools instead of building a custom export. Correction requests apply to inaccurate personal information we maintain; they do not require us to alter historical prompts, generated artwork or patterns, transaction records, consent records, Gallery license records, or other records that must remain accurate.
You can stop using the service and sign out at any time; this doesn't delete your account automatically.

Changes to This Policy

We may update this policy as the service changes. We'll update the effective date and version number above when we do, and material changes will be reflected here before they take effect. Continued use of Stitched Patterns after a change means you accept the updated policy.

Contact Us

Questions about this policy or your data? Email us at [email protected].