Privacy Policy

Last updated: 26 June 2026

TrixiStitches ("the Service", "we", "us") is a web app that helps you read knitting and crochet patterns: it imports pattern PDFs, highlights your chosen size, offers an abbreviation glossary, and can produce an optional AI summary of a pattern. This policy explains what information the Service handles, why, how it is stored, and the choices you have. The Service is operated by Ruan Mentz and hosted at https://trixistitches.com.

1. Information we handle

a. Account information (Google Sign-In)

If you sign in with Google, we receive and store a stable Google account identifier, your email address, and your display name. We use these only to create and recognise your account and to associate your saved connections with you. We do not receive your Google password.

b. Connected storage providers

If you connect Dropbox, Google Drive, or Ravelry, the provider issues us an access token so the Service can, on your instruction, list the PDF files available in that account and download the specific file you choose to import. We request the minimum access needed:

Google Drive — read-only access (the drive.readonly scope) to list and download PDF files you select. We never create, modify, or delete files in your Drive.
Dropbox — read access to file metadata and file contents, to list and download PDFs you select.
Ravelry — read access to your own pattern library and the ability to generate a download link for a PDF you select.

The contents of a file are downloaded only when you explicitly choose to import it, and are then processed in your browser for reading. We do not browse, index, or copy your files in the background.

c. Pattern analysis (optional, opt-in)

The "pattern at a glance" AI summary is off by default. Only if you explicitly enable it for a pattern do we send that pattern's text to our AI processing provider (Groq) to generate the summary. The text is used only to produce your summary and is not used to train models by us. You can disable AI analysis at any time from the Privacy panel.

d. Data stored in your browser

Your reading progress, selected size, line notes, counters, and preferences (including the AI opt-in) are stored locally in your browser (localStorage) and stay on your device. They are not uploaded to us. You can export or delete this local data at any time from the in-app Privacy panel.

e. Operational data

To keep the Service reliable and secure we record privacy-safe operational metrics such as request counts, response status codes, and latency. These records never include raw pattern text, AI prompts, provider tokens, API keys, or your file names.

2. How we use information

To authenticate you and maintain your session.
To list and import the specific files you choose from a connected provider.
To generate an AI pattern summary, only when you opt in.
To operate, secure, debug, and improve the reliability of the Service.

We do not sell your personal information, and we do not use it for advertising.

Google API Services — Limited Use disclosure. TrixiStitches's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google Drive is used only to provide and improve the file-import and reading features you request; it is not transferred to others except as needed to provide those features, to comply with law, or as part of a merger; it is not used for advertising; and no humans read it except with your consent, for security, to comply with law, or where the data is aggregated and anonymised.

3. How information is stored and protected

Provider access tokens are encrypted at rest and stored on our server. They are never returned to the browser or exposed in the app interface.
Your session is carried by an HttpOnly cookie, transmitted over HTTPS in production.
Imported file contents are processed in your browser to render the pattern; we do not retain copies of your pattern files on our server.
Local reading data remains in your browser under your control.

No method of transmission or storage is completely secure, but we apply reasonable safeguards appropriate to the data involved.

4. Sharing and third parties

We share information only as needed to run the features you use:

Identity & storage providers you choose to connect: Google, Dropbox, Ravelry.
AI processing: Groq, used only to generate a summary when you opt in.
Hosting: Render, our hosting provider.
Legal: where required by law or to protect rights, safety, and security.

5. Data retention and your choices

Disconnect / sign out from the in-app Privacy panel to end your session.
Revoke access at any time directly with the provider — for Google via Google Account permissions, and similarly in your Dropbox or Ravelry account settings. Revoking invalidates the token we hold.
Delete local data (progress, notes, counters, settings) from the Privacy panel.
Delete account data we hold (your Google identifier, email, name, and stored connections): contact us at [email protected] and we will delete it.

We retain account and connection data only while your account is active or as needed to provide the Service, and delete it on request as described above.

6. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information.

7. International users

The Service is hosted by Render and your information may be processed in the country where our hosting and processing providers operate. By using the Service you understand your information may be transferred to and processed in those locations.

8. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you. Continued use of the Service after a change means you accept the updated policy.

9. Contact

Questions or requests about this policy or your data: [email protected] (operated by Ruan Mentz).