Skip to content

Privacy Policy

Last updated: 2026-07-08

AeternaCraft Studio ("we", "us", or "our") operates aeternacraft.com, including the Photo-to-Pattern Studio, the Amigurumi Yarn & Resizing Calculator, and the AeternaCraft blog (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Information you provide

  • Account information: When you sign in with Google, we receive your email address and a public profile identifier. We do not request access to your Google Drive, Gmail, or any other Google service.
  • Photos you upload: When you use the Photo-to-Pattern Studio, the image you upload is processed to generate a crochet pattern. Uploaded images are stored only for the duration needed to produce your pattern and are deleted automatically within 24 hours unless you save a project to your account.
  • Project data: If you create an account, your saved projects (pattern settings, colour palettes, yarn kit selections) are stored so you can resume work across sessions.

1.2 Information collected automatically

  • Usage data: We collect anonymised analytics about page views, tool usage, and feature adoption through Cloudflare Web Analytics. This data is aggregated and does not identify individual users.
  • Cookies and local storage: We use essential cookies to keep you signed in and local storage to save your calculator inputs. We do not use third-party advertising cookies.
  • Server logs: Our hosting provider (Cloudflare) records standard request logs (IP address, timestamp, user agent) for security and abuse prevention. These logs are retained for 30 days.

2. How We Use Your Information

  • To generate crochet patterns and calculate yarn requirements.
  • To maintain your account and saved projects.
  • To respond to support requests and improve the Service.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data are:

  • Consent — when you sign in with Google or upload a photo for processing.
  • Contract — to deliver the pattern generation service you requested.
  • Legitimate interest — for security, fraud prevention, and service improvement.
  • Legal obligation — to comply with applicable laws.

4. Data Sharing

We do not sell your personal information. We share data only with the following service providers, who process it on our behalf under written agreements:

  • Cloudflare — content delivery, DDoS protection, and web analytics.
  • Google — Google Sign-In authentication (we receive only your email and profile ID).
  • DeepSeek — AI processing for pattern generation (only the uploaded image is sent; no account data).
  • Stripe / Shopify — payment processing for Pro subscriptions (we never see or store your card details).

5. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Object to or restrict certain processing.
  • Withdraw consent at any time (without affecting processing already carried out).
  • Request a portable copy of your data.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@aeternacraft.com. We respond to verified requests within 30 days.

6. Data Retention

  • Uploaded photos: Deleted within 24 hours of pattern generation (unless saved to a project).
  • Account data: Retained while your account is active; deleted within 30 days of account deletion request.
  • Saved projects: Retained while your account is active.
  • Server logs: 30 days.
  • Anonymised analytics: Aggregated and retained indefinitely; cannot be linked back to you.

7. International Transfers

Your data may be processed by our service providers in countries outside your jurisdiction (including the United States). We rely on Standard Contractual Clauses and provider-level safeguards to protect data during such transfers.

8. Security

We use HTTPS (TLS 1.3) for all connections, store passwords using one-way hashes, and enforce Content Security Policy headers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes affecting your rights, we will also send an email to registered users.

11. Contact

If you have any questions about this Privacy Policy, contact us at privacy@aeternacraft.com.