Privacy notice

This notice explains how Knitglass, operated by Beeju in Switzerland, handles personal data when you use the Knitglass website and row companion. Knitglass is the data controller for this service. As a Swiss controller we are subject to the Swiss Federal Act on Data Protection, and because we serve knitters in the European Union and the United Kingdom we also work to the GDPR; where the two differ we follow whichever gives you more. Privacy enquiries, support requests and data-rights requests can be sent through the contact form.

Information we collect

• Account information: your name, email address, profile image and provider account identifier supplied by Google or Microsoft when you sign in. We never receive or store your provider password.
• Preview access information: during a private preview, administrators may store the exact email address you will use to sign in so Knitglass can permit access.
• Pattern information: uploaded pattern files, prepared instructions and charts, selected sizes, pattern families, processing status and recovery diagnostics.
• Ravelry information: if you connect a Ravelry account, Knitglass reads your Ravelry library and your list of pattern downloads so you can choose one to bring here, and downloads the pattern file you choose. We store that file and the prepared pattern made from it in the same way as one you upload yourself, and we keep a record of which pattern came from which Ravelry download. We never receive your Ravelry password. You can disconnect the account at any time from Ravelry settings in Knitglass; patterns you already brought here stay in your library until you take them out.
• Reader information: current row, completed rows, gauge, measurements, notes and other settings needed to provide your row companion.
• Membership information: when you support or subscribe through Buy Me a Coffee, it sends Knitglass your supporter name and email, supporter and membership identifiers, membership status and dates, and limited transaction details such as amount and currency. Knitglass does not receive or store your payment-card details.
• Technical information: session identifiers, request and security information, device/browser information and operational error logs generated when the service is used.
• Support information: ticket reference, category, status, conversation, pattern/size/part/row context, resolution history, and a device diagnostic report only when you choose to include it.
• Device-only information: theme, reader settings, keep-awake preference, PWA prompt state, a recent incident journal, and an offline copy of the currently loaded pattern, all its parts and queued row-completion changes are stored locally in your browser.
• Promotion codes: Redeeming a promotion code records your account, the pattern, the code and the date; the author who gave you the code sees your account name, a partly hidden email and when you redeemed it, and the record is deleted when you remove the pattern, the code is revoked or you delete your account.

Why we use information

Knitglass does not use your data for advertising, sell personal data, or make legal or similarly significant decisions about you using automated processing.

Who processes information

We disclose information only where needed to run the service:

• Cloudflare hosts the application, database, file storage, transactional email and operational security services. Cloudflare Turnstile processes browser and connection signals when you use the support form to distinguish people from automated abuse.
• Google and Microsoft provide passwordless account authentication when you choose their service.
• Providers of AI language models carry out the automated reading of an authorised pattern. They receive the pattern's content and nothing about you, and under the API terms we use them on, they do not train their models on it.
• Ravelry holds your Ravelry account and the patterns you bought there. Knitglass reaches it only with the access you grant, only for your own library, and only when you ask it to. Knitglass is not made by, associated with or endorsed by Ravelry.
• Buy Me a Coffee processes voluntary support and membership payments. It sends signed lifecycle notifications to Knitglass so the matching account can receive, update or lose the applicable membership access.
• Authorised Knitglass administrators can access account, pattern, processing and support-ticket information when needed to operate and support the service.

That reading proposes how the pattern's sentences should be understood. It does not compute the knitting: every stitch count, chart square and row a knitter follows is worked out afterwards by Knitglass's own code, and no AI model writes into a saved pattern.

The Buy Me a Coffee button is a normal external link. Knitglass does not load Buy Me a Coffee code or share browser data with it before you click. Once you leave Knitglass, that service’s own privacy terms apply; if you complete support or membership activity, Buy Me a Coffee sends the lifecycle information described above back to Knitglass.

Where your information is held

Our database - your account, your patterns' prepared rows, your progress, notes and swatches - is hosted in the European Union. Uploaded pattern files are held in Cloudflare's object storage, which may keep them in more than one region. We are established in Switzerland, and personal data moves freely between Switzerland and the European Economic Area in both directions under the European Commission's adequacy decision for Switzerland.

Some processing does happen further afield: the automated reading of a pattern is carried out by a model provider, sign-in is handled by Google or Microsoft, and Cloudflare is a United States company even where the data it holds for us is in Europe. Where data-protection law requires it, those transfers rely on an approved safeguard such as an adequacy decision or standard contractual clauses. Provider details are available in the Cloudflare Privacy Policy, Google Privacy Policy and Microsoft Privacy Statement.

How long we keep information

• Account records are kept while your account is active. You can delete your account yourself from your profile: you are signed out at once, you can restore it by signing in within 30 days, and after that the account, its patterns and files, progress, notes, charts and connections are permanently removed. Patterns you created are removed from every library they were shared into. Payment and membership records needed to reconcile refunds, resolve disputes and meet legal obligations are kept without the link to your account.
• Private-preview email addresses are kept until an administrator removes them, the preview access model no longer requires them, or you ask us to delete applicable data.
• Patterns, revisions, progress, notes and related records are kept until you delete them or your account, or an administrator deletes the pattern.
• Membership webhook records are kept while needed to apply access, prevent duplicate processing, reconcile refunds or cancellations, resolve disputes and meet legal obligations.
• Security and operational logs are retained only for the period reasonably needed to protect and diagnose the service, then deleted or aggregated according to provider settings.
• Support tickets, their conversation and related notification emails are retained only as long as needed to answer the request, maintain a support history, improve recurring pattern support and meet legal obligations.
• The offline pattern snapshot, queued progress, incident journal and browser preferences remain on your device until replaced, cleared during sign-out where supported, or removed when you clear site data.

Security

We use passwordless OAuth, encrypted HTTPS connections, access controls and private storage to reduce risk. No internet service can guarantee absolute security. Keep your Google or Microsoft account secure and tell us promptly if you suspect unauthorised access.

Your data-protection rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, and to receive a portable copy of personal data. Where processing relies on consent, you may withdraw it. You can exercise these rights through the contact form. We may need to verify your identity before responding.

You may also complain to the data-protection authority where you live or work, or where you believe a breach occurred. In Switzerland that is the Federal Data Protection and Information Commissioner; EU authority contacts are listed by the European Data Protection Board, and in the United Kingdom it is the Information Commissioner's Office.

Cookies and local storage

Knitglass uses the session cookie required to keep you securely signed in, IndexedDB and Cache Storage for the current pattern's offline reader, and local browser storage for the functional preferences and incident journal listed above. Offline row changes are sent to Knitglass only after your connection returns. We do not currently use advertising or analytics cookies. Because these technologies are necessary to provide settings or the service you request, they are active without an optional-cookie consent banner. If that changes, we will update this notice and request consent where required.

Children

Knitglass is not directed to children under 16. A parent or legal guardian should use the contact form if they believe a child has provided personal data without appropriate authorisation.

Changes to this notice

We may update this notice when the service or legal requirements change. The date above identifies the current version. Material changes will be communicated in the application where appropriate.