Privacy policy

Who is responsible

The controller of your personal data is Iuliia Nikonorova, a sole trader, Bermanova 22, 196 00 Praha, Czech Republic, IČO 30121817. Contact for anything about your data: [email protected]. We are not required to appoint a data protection officer and have not appointed one.

What we collect, why, and on what basis

Data	Why	Legal basis (GDPR Art. 6(1))
Email address, password (stored only as a one-way hash), optional name, whether your email is verified	To create and run your account and let you sign in	(b) contract
The creator name you choose, if you set one	To show it on your exports and on share links where you turn it on	(b) contract
Sign-in sessions, one-time email links, the time you were last active	To keep you signed in securely and protect accounts	(b) contract; (f) legitimate interest in security
Charts, stamps, palettes and stitching projects you save, including the photo when you save it with a chart, and their previews	To store your work for you	(b) contract
Share links you make, and the charts you add from other people's links	To let you share and keep charts	(b) contract
Photos you upload to make a chart without saving	To generate the chart; held in memory for at most 5 minutes and not written to storage	(b) contract
A record of each chart generated or exported (kind, time, and a fingerprint of the photo that cannot be turned back into it)	To apply the limits of your plan and count use of the service	(b) contract; (f) legitimate interest in running the service
Subscription details: Stripe identifiers, plan, status, period end, payment-failure state, the history of changes and the notices we sent you	To provide the plan, collect payment and handle failed payments	(b) contract
Your acceptance of the terms and withdrawal information, your early-start request, and any withdrawal	To prove what was agreed and carry it out	(c) legal obligation; (f) legitimate interest in proof
Invoices and payment records	Tax and accounting	(c) legal obligation
Internet address, browser and pages requested, in server logs	To keep the service running and secure, and to stop abuse	(f) legitimate interest in security
Messages you send us, and reports about content	To answer you and act on the report	(b) contract; (c) legal obligation; (f) legitimate interest in handling requests

You need to give your email address and a password to have an account, and payment details to buy a plan. Everything else is optional. We make no decisions about you by automated means that have legal or similarly significant effects. Plan limits are applied automatically, as the Plan page describes.

We do not use analytics, advertising or tracking tools, we do not use your content to train artificial intelligence, and we do not sell your data.

Email. We write to you only about your account and plan: to confirm your address, reset a password, confirm a purchase or a withdrawal, tell you about a payment, and tell you about changes to the service or to these documents. We send no newsletters or advertising.

Children. An account needs a person of at least 15, or a parent or guardian who sets it up and is responsible for it.

Sharing charts

When you make a share link to one of your charts, anyone with the link can see the chart's name and a small preview of it. After logging in, they can add the chart to their account, as it was when you made the link. If you chose to show your creator name on that link, they see it too. They keep what they added, and any projects they start from it, after you revoke the link or delete the chart, until they remove it or delete their account. You see how many accounts added your chart, never which ones.

Charts you open in the reader

A PDF or picture you add to the reader is read in your browser and is not sent to us. We receive and store the chart read from it, and the file's name.

Cookies and storage in your browser

We use only cookies that are strictly necessary, so they need no consent:

• one that keeps you signed in, for up to 7 days since you last used the service;
• two that protect sign-in against forgery and send you back to the right page;
• one set when you log out, which holds only the time of the logout and is kept for about 13 months. It lets the reader remove charts it kept on that device for the account that logged out.

Cloudflare, which protects the site, may add a short-lived security cookie when it checks that a visit is not an attack.

The editor and the reader also keep your current work, your options and copies of charts for use without a connection in your browser's own storage, so a reload or a lost connection doesn't lose them. That stays on your device, and clearing the site's data in your browser removes it.

Who receives data

These companies process data for us, under contract:

• Contabo GmbH (Germany) — hosts the service and its database.
• Cloudflare, Inc. (United States) — carries traffic to the site and protects it from attacks. Transfers to the United States rely on its certification under the EU–US Data Privacy Framework, with the European Commission's standard contractual clauses as a fallback.
• Stripe (Stripe Payments Europe, Limited, Ireland) — processes payments. Stripe also acts as an independent controller for its own purposes, such as fraud prevention; see Stripe's privacy policy. Where Stripe sends data to the United States, it relies on the EU–US Data Privacy Framework and standard contractual clauses.
• Resend (Plus Five Five, Inc., United States) — sends our emails (address confirmation, password reset, purchase and payment notices). Transfers rely on its certification under the EU–US Data Privacy Framework and on standard contractual clauses.

Write to us if you want a copy of the safeguards for these transfers. We give data to public authorities only when the law requires it. People you share a chart with see what the section on sharing describes.

How long we keep it

• Account data, saved charts and share links: until you delete your account. Deleting it removes them. Charts other people added from your links stay with them, as described above.
• What you agreed to when you bought a plan (the versions of the terms and withdrawal information, your early-start request, your email address and the dates) and any withdrawal: kept after you delete your account for 3 years from the end of the plan, the period in which a claim can be brought, as proof in case of a dispute, and then deleted.
• Records of generations and exports: when you delete your account they are no longer linked to you, and are kept as anonymous counts.
• Uploaded photos that you don't save: at most 5 minutes, in memory only.
• Invoices and payment records: as long as Czech tax and accounting law requires, which is generally up to 10 years. Stripe keeps its own records of your payments.
• Messages you send us: as long as it takes to deal with them and with any dispute that follows.
• Server logs: at most 30 days.
• Backups: a copy of the database is made before each update of the service. Copies older than 30 days are deleted at the next update, after which deleted data is gone from them too.

Security

Connections to the service are encrypted, passwords are stored only as one-way hashes, we never receive your card details, and the database cannot be reached from the internet. No system is perfectly secure. If a breach is likely to put you at high risk, we will tell you without undue delay, as the law requires.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable form. Where we rely on legitimate interest, you may object. Write to [email protected]; we answer within one month. If we cannot tell that a request comes from the account's owner, we may ask you to confirm it from the account's email address.

You may also complain to the Czech data-protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

Changes

We will publish any change here and, if it matters to how we use your data, tell you by email first. Every version of this policy stays readable on this page.