Privacy

Proposed effective date: 5 November 2026

Last updated: 2 November 2026

Proposed update, not in effect yet. Until then the current version applies.

Oversized imports from other programs. On Free, an imported chart bigger than the Free chart-size limit opens to view only: no editing, printing, exporting, sharing or copying. Saving that import as a .stitchwing file does not remove the restriction. Charts made in StitchWing still open, display and print, even above the Free size limit, with no account, license or internet connection. The current Free limits are shown on the pricing page and in the app; no limit is set by this paragraph.

Your patterns remain yours. This exception does not restrict your ownership or use of your patterns outside StitchWing. The file-opening and printing statements below refer to charts made in StitchWing; oversized imports have the view-only exception above.

The short version#

• Your patterns stay on your computer or iPad. We never receive them unless you choose to attach one to a problem report. That box starts unticked, and you see exactly what's being sent before you press Send. Nothing in StitchWing uploads your work on its own.
• If you choose to send a pattern to testers, or follow it on your phone, that chart — never the file itself — is held on our server only while you're sharing it, and deleted the moment every link to it ends. Off by default; you turn it on per pattern, per test or per phone. See "Sharing patterns with testers or your phone" below.
• The free version on Windows and Mac needs no account, so we hold nothing about you unless you send us something, sign up to test, we invite you to test, or someone supplies your details to send you a gift. If you ask us to tell you when StitchWing is out, we hold that email address and the few details about your sign-up listed under "The release list" below, and nothing else. If you send us a problem report, a message or a testimonial, we hold what you sent, as set out under "Reports, messages and testimonials" below. If you sign up to test or we invite you, we hold what's listed under "Beta testing" below. An account is for buying on our website, for carrying a license between computers, for selling in the store, and, on iPad, for store items that follow you to your other devices — and then we hold your email address. On iPad you do not need an account to subscribe or to restore a subscription. We say below exactly what else we hold and why.
• We don't sell your information, we don't show ads, and the regular app doesn't track what you do in it. There are no analytics in the regular app. In the app, only beta versions measure anything, and only for testers who agreed: see "Beta testing" below. On this website, we count visits: which pages are read and how people found us. We do it on our own server, with no cookies and nothing that identifies you, and if your browser sends Global Privacy Control or Do Not Track, we don't count your visit at all. See "Website analytics" below.
• Reports, messages and testimonials reach us only when you press Send. The regular app never sends a crash report by itself. (Beta versions do, for testers who agreed to it.) The short diagnostic log the app keeps on your computer only reaches us if you leave it in a report you choose to send.
• A chart made in StitchWing you already have always opens. No account, no license and no internet connection are needed to open, look at or print a pattern made in StitchWing that's already on your computer. That will not change.
• On iPad you can subscribe, and restore a subscription, with just your Apple Account — no StitchWing account. If you sign in to a StitchWing account (needed only for store items that follow you to your other devices), account and purchase checks use your email address, full name, user ID, an app-specific device code and Apple transaction records. Apple processes in-app payments. Deleting your StitchWing account does not cancel an Apple subscription; cancel it separately in your Apple Account settings. See "StitchWing for iPad" below.
• Questions, or want your data? Email support@stitchwing.com.

• The help box on this website, Ask StitchWing, keeps your questions on your own device. When you open it, your browser downloads a small program and our help pages from us, and works out the answer itself. What you type never comes to us. No account, no cookies, no outside company.

1. Who we are#

StitchWing is made by Lite Work Designs LLC, 14502 Greenview Dr Ste 500 #1159, Laurel, MD 20708, United States. We're the ones who decide what's collected and why. Under European and UK law that makes us the "controller."

Everywhere below that says "we" or "us" means that company, and every postal address on this page is that address.

This page covers the StitchWing apps for Windows, Mac and iPad, the stitchwing.com website and your StitchWing account, and the emails we send you. Platform-specific practices are explained below, including "StitchWing for iPad" in section 4.

2. Your patterns stay with you#

Your pattern files, the photos you bring into them, autosave and recovery copies, your yarn notes and your settings are stored on your own computer or iPad. We don't receive them, and we have no way to look at them.

There are two exceptions, both things you choose to do, never something StitchWing does by itself: a pattern you include in a problem report (see "Reports, messages and testimonials" below), and a chart you choose to share with testers or follow on your phone (see "Sharing patterns with testers or your phone" below).

If you keep your patterns in a cloud folder such as OneDrive, iCloud Drive or Dropbox, that service's own privacy policy applies to the copies it holds. That's between you and them.

3. Why StitchWing asks for an account#

On Windows and Mac, you do not need an account to use the free version. Download StitchWing, open it, and start charting. The free version's limits apply, and nothing asks who you are.

An account is for the things that have to belong to somebody: buying, your license across more than one computer, and selling in the store. No card is needed for the free version — it is free, and we don't ask for payment details to use it.

On iPad, you don't need a StitchWing account to subscribe or to restore a subscription. Those use your Apple Account only. The app does not send an account-free subscription to us, and we have no way to link one to you. A confirmed StitchWing account is needed on iPad only for Template Store and Graphics Store items, because those purchases belong to your account and follow it to your other devices, including Windows and Mac. The account/device and Apple purchase information used for signed-in purchases is described in section 4.

What an account means for you: you give us an email address and choose a password, and you confirm the address by typing a six-digit code we email you.

What it does not mean: it does not gate your own files. A pattern made in StitchWing already saved on your computer opens, displays and prints with no account, no license and no internet connection. You can do that from the very first screen, before you've signed up for anything, and it stays true forever.

What we get out of it: a way to deliver what you've bought, keep your license working across your computers, and reach you if something goes wrong with your license or your purchase. If you use the free version without an account, we don't know you exist unless you write to us, send us a report, sign up to test, or we've invited you to test. A gift giver can also supply your name and email for delivery, as described under Gifts below. We can't count free users. We can contact you only at an address supplied for a reply, invitation or gift.

What you give us when you sign up#

• Your email address. It's your username. It's also how we send your license key, your receipts and anything important about your account.
• A password. We never store the password itself. We store a scrambled (hashed) form of it that can be checked but not reversed, and it's ours alone — a StitchWing password doesn't open anything else.
• Confirmation that the address is really yours, in the form of the six-digit code you type back.

We keep the account holder’s full name to run their account and help with purchases and support. You can edit it in your account. If an existing account has no name, we use the name from its own payment or ask you to add it when you next sign in. Your account name is not shown publicly or used for marketing.

4. What the app sends us, and when#

The Windows and Mac app talks to our servers in the situations below. The iPad account, store and purchase connections are described separately at the end of this section. Nothing is sent in the background about what you draw, click or open. Beta versions can also send usage counts and crash reports, but only for testers who agreed. That's the last row, and "Beta testing" below.

We keep a daily count of update checks per app version, platform and processor type; these counts store no IP address, account, computer ID or timestamp finer than the day, and they are estimates of update checks, not exact installs or people. We delete these daily totals after 90 days.

When enabled, we keep only the day, platform, app version and count of Windows and Mac installer download starts for the configured retention period (90 days by default), with no IP address, browser details, account, referring page or time of day.

On-screen colours are approximate. StitchWing shows yarn and thread colours as closely as it can, but screens and printers differ. That's a product note rather than a privacy one, but it's the kind of thing we'd rather say than have you find out.

StitchWing for iPad#

Account and device binding. When you create an account or sign in, we receive your email address, password over an encrypted connection, and an app-specific device code, device label, operating system and app version. We keep a password hash, not your password. Your account has a user ID. The iPad app creates a random value in the iPad Keychain and sends only a one-way hash of that value as its device code. It does not read a hardware serial number or advertising identifier for this purpose. The code is linked to your account and is not anonymous. We use it to bind your sign-in session and access checks to that installation, prevent misuse and recognise signed-in devices. Account and device records include verification, session and first/last-seen dates. This iPad code is different from the Windows/Mac machine identifier described in section 5.

Purchases and restores. Apple processes payments for purchases made inside the iPad app. Subscribing to the iPad plan and restoring it need only your Apple Account. If you are not signed in to a StitchWing account, the app checks your subscription with Apple on your iPad, does not send it to us, and we have no way to link it to you. The rest of this paragraph describes what happens when you are signed in. Store items always need a signed-in account. When you are signed in, the app gives Apple your StitchWing user ID as an app-specific account reference so we can match a purchase to the right StitchWing account. Apple does not receive your StitchWing password from this flow. When you are signed in, the app sends us Apple's signed transaction information when confirming or restoring purchases, and Apple also sends purchase, renewal and refund notifications to our server. These include product, transaction and original transaction IDs, the account reference, purchase and expiry dates, refund or revocation information when applicable, and whether the transaction is a production or sandbox purchase. We keep verified purchase/subscription and ownership records, notification references and verification hashes; sandbox access is also bound to the signed-in device. We use them to deliver and restore purchases, check subscription access, prevent fraud and duplicate grants, and apply renewals, expiry and refunds. First-party store-item ownership can be used with the same account on iPad, PC and Mac; an Apple iPad subscription grants iPad access. We do not receive your payment-card number or Apple Account password. Apple's handling of payments, its own records and any diagnostics you choose to share with Apple follow Apple's Privacy Policy.

Local work and permissions. Chart editing, photo-to-chart conversion, camera images you choose to use, garment measurements, progress and time-lapse recording/export are processed on your iPad. They are not uploaded to us by those features. Photo selection uses the system picker; camera access, microphone and speech-recognition access, and saving to Photos ask for the relevant permission. Voice commands are optional. If you turn them on, the app listens for a few words such as "next" and "back" and uses the iPad's speech recognition set to run on the device only. The app does not send your voice, or what was recognised, to us. If your iPad cannot recognise speech on the device, the feature stays off instead of using a server. You can change permissions in iPad Settings. Files, Photos, iCloud, backups or a destination you choose in the share sheet may hold copies under their own policies. A chart or picture you explicitly submit in a support report is the separate exception below.

Support, feedback and diagnostics. If you email support or choose to send an available feedback/problem/crash report, we receive your message and any reply email you supply. A submitted app report also includes the app version, operating system and available system/language details; a crash report includes a cleaned description of the error. The recent diagnostic log can be reviewed and removed before sending. Patterns, pictures and screenshots are sent only if you choose to include them. These submissions help us answer you and diagnose or fix problems. The regular iPad app does not automatically upload crash reports or usage analytics to us. Local logs alone are not an upload; a report you submit can wait on your device and retry when online. Ordinary reports omit the account sign-in token, but your reply email or attachment can still identify you. The beta-only reporting described later is separate; using TestFlight alone does not switch it on.

Other connections. The iPad app requests current settings, store listings, pictures and purchased downloads from us, with account/device proof for private access. Our server sees the connection's IP address and uses the abuse-prevention handling described in section 11. iPad app updates are handled by Apple, rather than the Windows/Mac update-check mechanism described above.

Retention and deletion. Account and device information follows the schedules in section 13. Apple transaction, subscription, ownership, sandbox, notification and refund records currently have no automatic deletion date; expiry of access does not delete the underlying record. We use those records for restores, ownership checks, fraud prevention and disputes. On a deletion request we review what can be removed and explain any purchase, security or legal records we need to retain; we do not promise that every Apple record disappears with the account. This is separate from the seven-year schedule for ordinary orders and receipts. Apple controls its own retention. Reports and attachments follow the support schedules in section 13.

Deleting your account does not cancel an Apple subscription. Apple billing continues until you cancel through your Apple Account (Apple ID) settings. On iPad, open Settings → your name → Subscriptions → StitchWing → Cancel Subscription, or manage Apple subscriptions. Delete requests do not themselves refund purchases. See section 14 for how to request deletion of your StitchWing account.

5. The code for your computer, and what a "seat" is#

This section describes Windows and Mac. The iPad uses the random app-specific code described in section 4.

Your license covers a number of computers — the number is shown on your plan. To count them, we need to tell computers apart without knowing anything about your hardware.

How it works. StitchWing reads the identifier your operating system already has for the machine (on Windows, the MachineGuid that Windows setup creates; on a Mac, the platform UUID). It runs that through a one-way scramble on your computer, before anything is sent, and sends only the scrambled result.

Be clear about what that does and doesn't do. We never receive your computer's real identifier, its serial number or its network address, and we can't work them out from what we store. But the scrambled code is still your computer's code: it's how we recognise that machine next time. It's one-way, not anonymous, and we'd rather say so than imply more than is true.

Alongside it we store: the name you gave that computer (it starts as something generic like "Windows PC" — we never take your computer's own name, because those usually have a person's name in them), the operating system, the app version, and when we first and last saw it.

Removing a computer. On your account page, press Remove beside any computer. That frees the seat straight away, and it signs that computer out of your account as well — it can't quietly keep using your license afterwards. We email you when a computer is removed, so you'd know if it wasn't you. The record that the computer was once there is kept for 90 days, so the count can't be gamed, and then it's deleted. The full list of what we keep and for how long is under "Where your information goes, and how long we keep it" below.

6. Your account, buying and emails#

• Your account holds your user ID, your full name, your email address, your scrambled password, whether the address has been confirmed, and when the account was made.
• Your licenses and computers: the licenses on your account, the computers they're used on, your orders and your subscriptions.
• Your license key is kept in two forms: a scrambled copy we use to look it up, and an encrypted copy so that you can see your own full key on your own account page. Only your own signed-in session can decrypt it. There is no way for us to read it — no admin screen shows it and no code path exists to fetch it. If support needs to help you, the answer is always "we'll issue a new key and email it to you."
• Buying on our website or from Windows/Mac: payments run through our payment processor. In-app iPad payments are processed by Apple as described in section 4. We never see or store your card number. They collect your card and billing details. We receive what you bought, the price, the tax, the date, whether it went through, and their reference numbers. They also use payment information for their own fraud prevention and legal duties, as an independent company under their own policy. On our website and in the Windows and Mac app an account is required to buy — there's no guest checkout — so those purchases are recorded on your account from the start. (On iPad the plan is bought with your Apple Account, as described in section 4; iPad store items are recorded on your StitchWing account.) A gift's license belongs to the account that redeems it. Pre-orders are paid at checkout like any other purchase. If you cancel before release, or we refund you, the money goes back to the card you paid with.
• What you agreed to when you bought. When you pre-order or buy a plan, we keep a record of what you agreed to: the exact words you were shown on our pre-order page and at checkout, which version of these terms was in force, when you agreed, the IP address and browser details your device sent at that moment, the country on your billing details, and our payment processor's reference for the checkout, including its record that you ticked the box. We keep it so we can show what was agreed if a payment is disputed, and because some US state laws require us to keep proof that you agreed to a plan that renews. If you don't finish paying, we delete that record within 14 days. If a payment is disputed, we put together what we'd send the card network from that record, and a person checks it before anything is sent.
• Emails you need: your sign-in code, confirmation of your address, receipts, license keys, pre-order confirmations, the email asking whether you want to keep waiting if a pre-order runs past 30 days, the release-day email with your key, notices that a computer was removed, password-changed notices, renewal and payment notices. These can't be switched off while you have an account, because they're the account working.
• Offers and store news: we may email account holders offers about StitchWing plans, and news about new patterns and graphics in our stores, as often as once a week. Every such email has an unsubscribe link. We never sell or share this mailing list.
• Testing emails: if you sign up to test, one email to confirm, a short note if you sign up twice, and an invitation if you're picked. If we invite you another way, one invitation email. If we end your test early, we may send you one email to say so. Every tester-list email has a link to leave the list. To stop invitations, reply to one and say so. See "Beta testing" below.
• We don't track whether you open our emails or click their links. That's switched off for our whole sending domain, not per message.
• If you email us at support@stitchwing.com, or use the contact form on stitchwing.com, it goes to our own inbox. We keep your message so we can help you.

Gifts someone sends you#

The information comes from the giver. Gift checkout collects the recipient's name and email address, the giver's display name, occasion, optional personal message, and delivery date, time and time zone. We use these to send and administer that gift, handle delivery problems and related support requests. We do not create an account for a recipient or add them to a marketing list. Receiving a gift does not require an account; redeeming it requires the recipient to sign in or create and confirm one. The gift's purchase record belongs to the giver; the redeemed license belongs to the redeeming account.

Delivery details and the message are encrypted in separate delivery storage. Our email provider receives the address and gift email content to deliver it. The giver can see the details they supplied while we retain them, and receives delivery and redeemed-status notices. Those notices do not reveal the redeeming account's email, activity or pattern files. Authorised support staff can use delivery details to help with the gift.

Delivery retention is separate from the gift itself. While an email is scheduled, we keep the contact details and message needed to send it. We schedule deletion from our active delivery storage, including stored recipient-email content, within the configured period of no more than 30 days after sending, cancellation, refund, stopped contact or a delivery failure we stop retrying. If a printed gift is redeemed before its email is sent, that also starts the deletion period and we skip the later email. Resends do not extend an already scheduled deletion deadline. Unpaid gift delivery details are scheduled for deletion within 30 days of starting checkout. Deletion of these details does not expire an otherwise valid unused code. Copies already delivered to someone's mailbox cannot be recalled; email-provider copies and encrypted backups follow the separate schedules below.

We separately keep the gift's plan, term, purchased edition, code lookup and encrypted code, payment references, delivery/status dates, refund terms, redemption/account link and operations history. These gift entitlement and operations records currently have no automatic deletion date, so that deletion of delivery details does not lose an outstanding gift or its payment/redemption history. This is distinct from the ordinary order, account and admin-log schedules below. Contact us about access, correction or deletion; we assess what can be removed while preserving paid entitlements and necessary dispute or legal records.

No account is needed to ask us to stop gift contact, correct an address or delete unnecessary delivery details. Email support@stitchwing.com and identify the gift or address involved so we can check the request. Stopping contact is separate from cancelling or refunding a paid gift. Avoid including sensitive information in the gift message.

Where EU or UK data-protection law applies, before redemption our basis is our legitimate interest in delivering and administering a gift requested by its buyer (Article 6(1)(f) GDPR), subject to the recipient's right to object. After the recipient chooses to redeem, processing needed for their account and license rests on our contract with them (Article 6(1)(b)). The rights and contact details under "Your choices" apply to gift recipients too.

7. Reports, messages and testimonials#

These only reach us when you press Send.

Problem reports and crash reports, from the app#

• Nothing is sent until you press Send. If the regular app hits a problem, it offers to send a report. It never sends one by itself, and there's no crash-reporting service inside it. Beta versions are the one exception, for testers who agreed: see "What beta versions send us".
• You see it first. "See exactly what will be sent" shows the report word for word. What you see there is the whole report: we don't add anything to it after you press Send.
• What's always in it: what you wrote, the date and time, the app version, your operating system and its version, your processor type, and the language the app is set to.
• Your email address is only included if you type it, so that we can reply.
• If you're testing: if we switch on report linking during a test, problem reports you send from the app carry your account, and the app tells you before you send. It's off unless we switch it on. See "Beta testing" below.
• The diagnostic log is a short record of what the app did recently, such as "file opened" or "error while saving". It's kept on your computer for 14 days at most. It's cleaned as it's written: it leaves out your pattern names and what's in your patterns, email addresses, license keys and computer and server names, and the name of your user folder is replaced with ~. It starts ticked. You can read it before you send, and untick it.
• Your pattern is only included if you tick that box. It starts unticked. Pictures inside the pattern are a separate box, also unticked. Photos can show people and places, and some carry hidden details such as where they were taken, so think before you include them.
• If you're offline when you press Send, the report waits on your computer and goes when you're back online. You can cancel it until then. Once it's sent or cancelled, the waiting copy is deleted from your computer.
• What we use it for: only to understand and fix the problem, and to reply to you if you gave us your email address. If you attached a pattern, we open it only to fix that problem.
• Who sees it: only us. Reports and their attachments are kept on our own server. The email that tells us a report has arrived says only that it has, and never carries your diagnostic log, pattern or pictures. We don't store your IP address with a report.
• How long we keep it: under the current settings, attachments (diagnostic log, pattern, pictures and screenshots) are deleted 90 days after the report was received. The rest is deleted 365 days after we close it; messages never marked handled are deleted 730 days after arrival.

The contact form on stitchwing.com#

• We keep what you choose in the topic list, your message, your email address so we can reply, your name if you give it, an order number if you give one, and when you sent it. We don't store your IP address with it.
• It goes to our own support inbox, the same as an email to support@stitchwing.com. We send you one email to say it arrived, and nothing else. Sending a message doesn't put you on any mailing list.
• If you choose "Privacy request", we'll reply to the email address on your account to confirm it's you before we act.
• How long we keep it: 2 years after we've finished helping you.

Testimonials#

• If you send us a testimonial, we keep your words, the name you chose to show, your craft and location if you gave them, your email address (never shown), your answer about anything you've had from us, and a record of what you agreed to and when.
• If you were signed in when you sent it, we also note whether that account has paid for StitchWing, so that we only show "Verified buyer" when it's true. If you've had StitchWing free or at a discount, or have another connection to us, we say so next to your words. If you had StitchWing free for testing, we show "Got StitchWing free for testing" next to your words, whatever you answer on the form.
• Nothing is published until we choose it, and then only with the name you picked. We never change your words. We show it on stitchwing.com and in the StitchWing app. If you ticked the box for it, we may also use it in StitchWing's own social media posts and emails; once something is posted publicly, other people can see and copy it.
• Take it down any time: email support@stitchwing.com or use the link in your confirmation email. It's off our website and app within 7 days, and we delete our own posts that use it.
• How long we keep it: while we're showing it. Testimonials we don't use are deleted after 12 months. When one comes down, we delete it and keep only a short record that you agreed and when you withdrew, for 3 years, then delete that too.
• We only accept testimonials from people 18 or over.

8. Sharing patterns with testers or your phone#

This is off unless you turn it on, per pattern. Choosing "Send to testers…" or "Follow on my phone" in the app uploads that chart — its grid, colors and the verified written rows, never the .stitchwing file itself and never a photo — to our server, and creates one or more links.

Tester links. Each tester gets her own private link, or you make one link to share with several people, either way with an expiry date you set. She opens it at stitchwing.com/p and sees the pattern as a PDF marked "Tester copy," with her name on it, and can leave you a note pinned to a row or a stitch. We don't ask her for an account, an email address or her name for anything except the note she chooses to leave; if she types a name into that box, it's shown to you, never published or used for anything else. You can revoke any tester's link at any time, which stops it working immediately.

Follow on my phone. One private link, for you, showing the chart on your phone with the current row and a Next/Previous button. Moving to a new row on your phone or in the app updates the other within a few seconds, whenever both are online.

The link itself. It's a long, random link — not your name, not a number anyone could guess or count up from — and we store only a scrambled (one-way) version of it, so a copy of our database could not be turned back into a working link. The link lives in the page's own address, in the part after the #, which browsers never send to any server — so opening it doesn't put the link itself into anyone's server logs, including ours.

What we don't collect. Opening a shared link doesn't ask for an account, an email address or your name. We don't record a tester's or your phone's IP address, device or browser with the link, the notes, or the pattern.

How long we keep it. The chart is deleted the moment every link to it has ended or been revoked — whichever pattern owner turns everything off, that content is gone right away. Notes a tester left are kept a little longer, currently 30 days, so you still receive them if you were offline when sharing ended; then they're deleted too. These numbers can change; we'll keep this page current with whatever they are.

Reporting a pattern. If several different people report a shared pattern, it's hidden from every link until a person at StitchWing looks at it. Reporting doesn't ask for your name or contact details either.

Turning it off for your account, or for everyone (a StitchWing-wide switch we control), stops every existing link working immediately — the same emergency stop either way.

9. The release list#

If you type your email address into "Tell me when it's out" or "Tell me when it's on Mac", we keep:

• the address
• which of the two lists you joined: the release list, or the Mac list
• when you signed up, and when you confirmed it if we asked you to
• which version of the sign-up sentence you saw
• which page of stitchwing.com you signed up on

That's all. We don't keep your IP address, your browser details, or which ad or link brought you.

What it's for: on the release list, one email, the day StitchWing is released. On the Mac list, one email, when StitchWing is out for Mac. We also send an email when you sign up, and a short note if you sign up again with an address that's already on that list. The two lists are kept apart: joining one doesn't put you on the other. It isn't an account, and we don't use it for anything else.

Confirming. If we ask you to confirm by email, you're not on the list until you do. If you don't, we delete the address.

Leaving. Every email has an unsubscribe link. Using it deletes your address straight away, along with anything still waiting to be sent to you.

How long we keep it: until you unsubscribe, or until we've sent the release email, whichever comes first. After that we delete the list. The Mac list works the same way: until you unsubscribe, or until we've sent the Mac email, whichever comes first, and then we delete it.

StitchWing Market opening lists#

If you choose Join the designer waitlist or Tell me when it opens, we keep the same sign-up details listed above, including which Market list you chose and the version of its consent sentence. If you use the designer sign-up steps, we also keep your name, shop idea name, chosen crafts and optional shop, portfolio or social link with your sign-up. We use these answers only to prepare for the Market. An email-only sign-up does not require these answers. These are separate lists: joining one never adds you to another list or creates an account, a designer application or a shop.

We send a confirmation email first. You join only after clicking its confirmation link. We use the designer list for one email when designer applications open, and the Market opening list for one email when the Market opens. If you sign up again, we may send a confirmation link or a note that you have already joined. We do not use either list for other marketing.

Unconfirmed sign-ups follow the same deletion process as the other notification lists. Confirmed sign-ups stay until you unsubscribe; every email includes an unsubscribe link that deletes that list’s sign-up and any mail still waiting to be sent. You can also ask us to delete your sign-up at support@stitchwing.com.

10. Beta testing#

Before a new version of StitchWing is released, we ask a small group of people to test it. This section covers all of it: signing up, being invited, testing, and the one thing that works differently in a test version.

Only beta versions measure anything, and only for testers who agreed. The regular StitchWing app never tracks what you do in it, never counts which features you use, and never sends a crash report by itself. If you're not testing, nothing in this section applies to you.

We only accept testers who are 18 or over.

Signing up to test#

At stitchwing.com/beta you can ask to test new versions of StitchWing before they're released. It's a separate list from the release list and the Mac list: joining one never puts you on another, and we never move anyone between them.

What we keep: your first name and email address; which crafts you make; if you tell us, what else you make, your experience with charts and the charting software you use now; whether you ticked that you have a Windows PC; when you signed up and confirmed; which version of the sign-up sentence you agreed to; and, if you ticked it, that you agreed to let a beta version share usage (see "What beta versions send us" below). That's all. We don't keep your IP address or your browser details.

What it's for: choosing who to invite, so each group covers different crafts and experience. Nothing else. It isn't an account, and it isn't a marketing list.

The emails: one to confirm your address. You're not on the list until you press its button. If you don't, we delete your address when the button stops working, 7 days later. After that you get nothing unless you're picked, and then we send you an invitation. If you sign up again with an address that's already on the list, we send a short note saying so.

If you're not picked, you won't hear from us, and we delete everything above 180 days after you confirmed. You're welcome to sign up again.

If you're picked, we keep your answers until 90 days after your test ends, so we can see which crafts each round covered. Then we delete them.

Leaving: every email has a link to leave the list. Using it deletes everything above straight away. You can also write to support@stitchwing.com.

We may close sign-ups at any time. Closing them doesn't delete anyone who's already waiting.

If we invite you to test#

We invite people in two ways: from the tester list above, or because you've told us yourself that you'd like to test.

What we hold before you've said yes. If you came from the tester list, the invitation uses the first name and email address you gave us. If you asked us some other way, we type in your first and last name and your email address ourselves. We also keep how many days we're offering and on which plan, any short note we wrote to you, which of us sent it, and when it was sent, claimed or cancelled. That's all. Until you claim it you haven't agreed to anything, so we use these details only to send you the invitation and let you claim it.

The email. You get one email with a link to claim your days. The link works for 30 days, and only for the address we sent it to. There are no reminders, and an invitation doesn't put you on any mailing list. As with all our email, we don't track whether you open it or click it.

If you don't claim it, we delete your name, your address and our note 90 days after the link stops working, or after we cancel the invitation. Ignoring the email is a perfectly good answer.

If you'd rather not be invited, reply to the invitation email and say so, or write to support@stitchwing.com. We cancel the invitation, and it's deleted like any other we cancel.

If you claim it, you create an account with that address, or sign in if you already have one. You choose whether the beta version may send us usage counts and crash reports (see "What beta versions send us" below). The box starts unticked. If you already agreed when you signed up at stitchwing.com/beta, the claim page shows that instead, and you can stop sharing at any time in the beta version's Settings. From then on it's an ordinary account, with these additions:

• your name, as we have it from the invitation, stays on your account so we know who's testing;
• any short note we wrote to you in the invitation;
• a record of your test: how many days, when they started and end, and whether and when you agreed to sharing, and to which version of its words.

When you claim it, we send ourselves a short email saying so. It has your first name and the initial of your last name, but not your email address or our note.

While you're testing#

Testing is a two-way arrangement. You get StitchWing free for a while, and we ask you to use it and tell us what goes wrong. To see who's taking part, we look at:

• when each of your computers last checked in with us, and which app version it's on. The app already sends this for every signed-in computer (see "What the app sends us, and when");
• how many problem reports and how much feedback you've sent us while testing;
• how many days of your test have been used and are left;
• if you agreed to sharing, which days you opened the beta version.

Linking your reports to your account. If we switch on report linking during a test, problem reports you send from the app carry your account, and the app tells you before you send. It's off unless we switch it on, and it doesn't depend on whether you agreed to sharing. When it's on, it means we can see who's helping and reply to you even if you don't type your email address. Everything else about reports is as described under "Reports, messages and testimonials": you choose what goes in, and your pattern is only included if you tick it.

From these facts, our console labels each tester "Active", "Quiet" or "Not taking part". The label is worked out from those counts each time we look, and isn't stored. A person looks at it and decides what, if anything, to do: write to you, or end your test early. We never look at what's in your patterns to decide.

If your test ends early, or when it runs out, your account goes back to the free version by itself. Nothing charges you. Beta updates stop, and the app goes back to the regular version's updates. Every pattern made in StitchWing still opens, shows and prints, with no account, license or internet connection.

What beta versions send us#

This is the only part of StitchWing that measures how the app is used, and it only happens when all of these are true:

• you're using a beta version, not the regular app;
• it's signed in to a tester account;
• you ticked the box to allow it when you signed up or claimed your invitation;
• you haven't stopped it.

If any of these isn't true, a beta version sends exactly what the regular app sends, and nothing more.

What it sends:

• When you use it: which days you opened it, and how many times each day.
• Crash and error reports, automatically. What went wrong, where in StitchWing's own code, and the date it happened. We don't store the time of day. They're cleaned the same way as the diagnostic log: no pattern names, nothing that's in your patterns, no email addresses, license keys or computer and server names, and the name of your user folder is replaced with ~. Your pattern and its pictures are never included. They only ever reach us if you attach them to a report yourself.
• Feature counts: how many times a feature was used, such as "Fill: 12 times today". These are counts, not a recording of what you did. They never say where you clicked, what you drew or which file you had open.
• About the app: the app version, your operating system and its version, your processor type, and the language the app is set to.

It's linked to your account and to the one-way code for your computer, so we can tell which tester and which computer it came from. It's sent about once a day over an encrypted connection.

What it never sends: your patterns, their names, the pictures in them, what you type, recordings of your screen, the keys you press, your location, or anything about other programs on your computer.

You're told before you agree, and you can stop it. All of this is set out beside the tick where you agree to it, on the sign-up page or the invitation claim page. After that, the beta version's Settings has one line: See what's been sent, which shows you what was sent on each of the last 7 days, and Stop sharing. Stopping doesn't end your test. To leave the beta completely, switch updates back to the regular version in Settings.

Where it goes: to our own server, like reports. No analytics company is involved.

How long we keep it: usage counts and crash and error reports are deleted 90 days after your test ends. After that we may keep totals with nobody's name or account on them, such as "0.1.14 crashed 3 times while saving". The record of your test stays with your account, as described above.

10A. Contests#

Now and then we run a contest, such as the StitchWing Pattern Test: people make something from a StitchWing pattern, share photos of it, and the public votes on stitchwing.com. The contest's Official Rules say how it works. This section says what we hold if you take part.

It applies only if you sign up for a contest or vote in one, and only from the moment you do. You see a short version of it, and agree to it, before you sign up. It doesn't change anything else on this page, and if you never take part, none of it applies to you.

You must be 18 or over and live in the United States to enter or to vote. We don't knowingly collect contest information from anyone younger.

If you enter#

You take part with your regular StitchWing account, so your email address and password are held as described under "Why StitchWing asks for an account". What the contest adds:

• The name shown to the public: the display name or company name you choose. It isn't checked against any ID, so please don't use one you don't want shown.
• We check your answers that you're 18 or over and live in the US before you can sign up. We don't ask for your date of birth or your street address.
• What you agreed to: which version of the Official Rules and of the contest privacy notice you accepted, and when; and, when you submit your entry, when you agreed to let us show your photos.
• Your photos (up to 5), and where each one stands: waiting for review, approved, needing a fix, or removed, with our reason.
• Your entry's status: not yet submitted, submitted, withdrawn or disqualified, and our reason if we disqualify it.

What's shown to the public, once voting opens: your display name or company name and your approved photos. After the contest we show the vote totals for the top three. Your email address and account are never shown.

Your photos. When you upload a photo we rebuild the picture and remove everything hidden in the file, including where it was taken, when, and the camera or phone. We don't keep the original upload, and the picture people see may be smaller than the one you sent. File names are random and never include your name. Photos stay private until a person at StitchWing has reviewed them and voting has opened.

The photos stay yours. By entering, you let StitchWing show them on the contest pages and use them in StitchWing's own marketing, always credited to your display name or company name and never with your email address. The Official Rules set out that permission in full, including how to take it back.

If you vote#

You need a confirmed StitchWing account. We keep which entry you voted for and when, with the times your account was created and confirmed and the time you confirmed you're 18 or over and live in the US. We use those times only to spot votes that aren't genuine. Nobody else sees who voted for whom, including the entrants. We may cancel a vote that isn't genuine and keep a note of why.

Reporting a photo#

Anyone can report a contest photo with the link beside it. A report holds which photo, the reason you type, when it was sent and what we decided. It doesn't record who sent it, so please don't put personal details in the reason.

Contest emails#

Contest emails go to your account's email address and are about your entry only: that you've signed up, that we've received or reviewed a photo, that voting has opened, the results and, if you win, your prize. We don't use the release list, the Mac list or the tester list to promote a contest.

What we don't collect, and who else gets it#

• No IP address or browser details are stored with your entry, photos, votes or reports. As everywhere on our site, short-lived abuse counters expire within a day (see "IP addresses and cookies").
• No outside scripts, trackers or CAPTCHA services run on the contest pages.
• We don't sell contest information or use it for advertising. It's stored on our own server, and only the companies listed under "Where your information goes" handle it for us.
• Finchbook. The first-place prize includes a Finchbook trial, which reaches the winner as a code or link in our own email. We send nothing about you to Finchbook. If you use the code, Finchbook's own terms and privacy policy apply to what you give it.

How long we keep it#

Your choices in a contest#

• Withdraw your entry from your contest dashboard until the making period ends, or email support@stitchwing.com.
• See, correct or delete your contest information, or ask us to stop using your photos in our marketing: email support@stitchwing.com. If you've won, we keep the short record of the result and what you agreed to for the time in the table, because it's our evidence if a prize is questioned.
• Report a photo with the link beside it.

11. IP addresses and cookies#

IP addresses. Like any internet service, our server sees your IP address when the app or your browser connects. We use it to stop abuse — someone guessing passwords or license keys, or flooding our forms — and those counters expire within a day. We don't write IP addresses into our database and we don't look up where you are. Three exceptions, all deliberate: when you ask for a password reset, and in the "your password was changed" email, we keep and show a shortened version of the address (like 203.0.113.x) so you can tell at a glance whether it was you; and when you pre-order or buy a plan, we keep the full address and your browser details with the record of what you agreed to (see "Your account, buying and emails"). We delete them 18 months after that purchase, sooner than the rest of the record.

Cookies. stitchwing.com uses only the cookies it needs to work: the one that keeps you signed in, and a couple of short-lived ones during sign-in and activation. No advertising cookies, no analytics cookies, no session recording, no third-party embeds. (Our website analytics, below, uses no cookies; the only exception is the one that remembers "Don't count my visits" if you ask for it.) Our fonts are served from our own server, not from anyone else's. Checkout happens on our payment processor's own page, where they set their own cookies to prevent fraud, under their own privacy policy.

Website analytics#

We count visits to stitchwing.com so we can see which pages people read, how they found us, and whether the site works for them: for example, whether people who come to download StitchWing find the button. We do it ourselves, on our own server, with open-source software called Umami. No analytics company is involved, and nobody else receives it.

If your browser sends Global Privacy Control or Do Not Track, we don't count your visit. Our page doesn't send anything, and our server throws away anything it receives from that browser.

You can also press Don't count my visits on this page. We remember that choice with one small cookie that holds nothing else, and your visits from that browser aren't counted.

What your browser sends us, for each page you look at:

• the page's address on stitchwing.com. We remove everything after a "?" or a "#", except the short campaign labels some links carry to say where they were posted (utm_source, utm_medium, utm_campaign, utm_content and utm_term). We drop advertising click codes;
• on the first page you land on, the address of the other website that sent you here, if your browser shares it, with everything after a "?" removed. Moving between our own pages isn't recorded as a source.

For a few actions, we record the name of the action and the page it happened on: clicking to download, creating an account, starting a pre-order, starting a checkout, finishing a checkout, signing up to test, and joining the release list. Only the name of the action. Never your email address, your account or your order.

What our server adds: your browser's language, and the kind of browser, operating system and device (computer, phone or tablet) you're using. It reads these from what your browser already sends with every request.

Your IP address. Our server shortens it before the analytics software sees it: it removes the last part (so 203.0.113.45 becomes 203.0.113.0; newer IPv6 addresses are cut down in a similar way). The analytics software never receives your full address. From the shortened one, it estimates a rough location: the country and the region (a state, province or county). Never the town or city: our database throws that part away as it's written. It does that with a location database kept on our own server, so no lookup service is asked. Neither our website nor the analytics software writes your IP address to disk.

How it tells visits apart without cookies. To know that five page views were one visit, the analytics software makes a one-way code from the shortened address and the kind of browser, mixed with a secret value that changes every day. So the same person on two different days counts as two different visitors, and nobody can work backwards from the code to you.

What it doesn't do. It sets no cookies and saves nothing on your device (the only exception is the one you ask for: the cookie that remembers "Don't count my visits"). It doesn't read your screen size, doesn't try to fingerprint your device, doesn't record your screen and makes no heatmaps. It doesn't follow you to other websites. We don't link it to your name, your email address, your account, your orders or anything else we hold, and we don't try to.

Pages we never count: the admin console, your account pages, sign-in, activation, the invitation claim page, unsubscribe pages, the page our emails use to open the app, the pre-order pages our emails link to, the creator area, and pages that show a shared pattern. These are private, or are reached from a link meant only for you.

Who sees it: only us, in our admin console and on the analytics software's own page, both behind a sign-in. We see totals, such as how many visits came from Pinterest last week or which country visitors came from.

How long we keep it: 13 months, then it's deleted automatically. After that we may keep totals with no individual visits in them, such as "412 visits in March".

Ask StitchWing#

Ask StitchWing is the help box on stitchwing.com. You type a question, and it shows you the passage from our help pages that fits best, word for word, with a link to the page it came from. It's an automated helper, not a person.

It works on your device, not on our server. When you open it, your browser downloads a small open-source AI model and a copy of our help pages from our server, the same way it downloads any other part of the website. Your browser then compares your question with the help pages. What you type never leaves your device. We don't receive it, we can't see it, and nothing is sent to us or anyone else when you ask, whether or not it finds an answer.

What we do see. Like any file on our website, the download shows up in our server's ordinary records (your IP address and the time), as described under "IP addresses" above. That tells us a file was fetched. It tells us nothing about what you asked.

What stays in your browser. Your browser may keep the model and help pages on your device so they load faster next time. That is a copy of our files, with nothing about you in it, and there are no cookies. You can clear it in your browser's settings. Your question isn't kept, even on your own device, after you leave the page.

Please don't type personal details you wouldn't want on your screen. We never receive them, but you don't need them for a help question. If you need help with your account or an order, email support@stitchwing.com or use the contact form. Those messages are kept as described under "Reports, messages and testimonials."

It can be wrong. It picks a passage; it doesn't know your situation. If the answer matters — a refund, a license, a price — read the full page it links to or email us.

We can turn it off at any time.

The Ask StitchWing help box sets no cookies. Your browser may keep a copy of its files, which contain nothing about you.

12. What we don't do#

• We don't sell or rent your personal information, and never have.
• We don't share it with anyone for advertising.
• We don't show ads, in the app or on the website.
• We don't track you across other websites or apps.
• We don't read your files, unless you attach one to a problem report. Then we use it only to fix that problem.
• We don't collect your precise location. Website analytics estimates only the country and region a visit came from (see "Website analytics").
• We don't have analytics in the regular app. On the website we count visits ourselves, as described under "Website analytics". The anonymous daily update-check counts described in section 4 are not analytics or tracking: they do not identify or follow anyone. Beta versions count a few things for testers who agreed (see "Beta testing"), on our own server, with no analytics company involved. If anything else ever changes, we'll say so on this page before it does.

• We never receive what you type into Ask StitchWing. It's worked out on your own device and never sent to us or anyone else.

13. Where your information goes, and how long we keep it#

A few outside companies help us run StitchWing: the company that rents us our server, our website payment processor, our email delivery provider and our domain registrar. Apple processes payments for iPad in-app purchases, receives the account reference described in section 4, and supplies the transaction and subscription information we use to verify them. Apple handles its own payment and platform records under its own privacy policy. Our other service providers may use information only to do their job for us, and if you want to know which companies they are, email support@stitchwing.com and we'll tell you. There is no analytics company, no advertising network, no chat service run by anyone else and no help-desk tool. The help box on our website, Ask StitchWing, works on your own device with files from our own server, and nobody else receives anything from it.

Reports, contact messages and testimonials are stored in our own database on our own server. Our email delivery provider carries the emails that tell us something has arrived. For a contact-form message, that email includes your message, just as an email to support@stitchwing.com would. For reports and testimonials, it only says that something arrived. It never carries your diagnostic log, pattern or pictures.

We may also hand over information if the law requires it, such as a valid court order; to protect customers, ourselves or others from fraud or harm; or if the business is sold, in which case the information would go to the new owner, who would have to honour this policy, and we'd tell you before it happened.

The records we hold are stored on our own server in the United States, and the database on it is ours. Apple and the other providers also process information for their own services as described above. If you live elsewhere, that's where your information is processed.

14. Your choices#

These apply to everyone, wherever you live.

• See or download what we hold about you — email support@stitchwing.com from your account address and we'll send it to you. We'll answer within 30 days.
• Correct it — you can change your email address and your password on your account page. Anything else, including the name on an account made from an invitation, write to us.
• Close your account and delete your data — On iPad you can ask to delete your account in the app: Account → Delete account → Confirm deletion request. You can also email support@stitchwing.com from your account address. If the app cannot send your request, email us. Our team handles deletion requests within one month and emails you when complete; signing out alone is not deletion. Deletion ends your StitchWing licenses and account access, including a one-time "Own It" license. Deleting your account does not cancel an Apple subscription. Cancel it separately in your Apple Account (Apple ID) settings to stop future charges; see section 4. We handle website-billed subscription cancellation separately. Deletion does not itself refund a purchase. Your locally saved pattern files are not touched. Apple purchase/ownership/security records and gift entitlement/operations records are handled separately as described above. We explain any records retained for legal or dispute purposes, including necessary order/tax records and purchase-consent evidence for the schedules in section 13.
• Remove a computer — use the Remove button on your account page. How that works is under "The code for your computer, and what a seat is" above.
• Change your password — on your account page. Changing it signs every computer out, including the one you're on. That's intentional: it's what makes "my password was stolen" actually fix the problem.
• Choose what goes in a report — untick the diagnostic log, and leave your pattern and its pictures out, before you press Send. A report still waiting to go can be cancelled in the app.
• Take down a testimonial — email support@stitchwing.com or use the link in your confirmation email. It's off our website and app within 7 days.
• Stop marketing emails — use the unsubscribe link in any of them.
• Leave the tester list — use the link in any testing email, or write to us.
• Stop invitations — reply to an invitation email and say so, or write to us.
• Stop a beta version sharing — use "Stop sharing" in the beta version's Settings, where "See what's been sent" also shows you what was sent. Your test carries on. To leave the beta completely, switch back to regular updates.
• Stop sharing a pattern — use "Stop sharing" / "End the test" / "Stop following," or revoke one tester's link, in the app. It stops that link working immediately and, once every link on a pattern has ended, deletes that pattern's chart content from our server right away.
• Remove StitchWing from a computer — uninstall it. Your pattern files stay where you saved them; delete them yourself if you want to, like any other file.

Using any of these never costs you anything and never changes the service you get.

Do Not Track and Global Privacy Control: we don't track you across websites and we don't sell or share your information, so these browser signals have nothing to switch off here. If that ever changed, we'd treat a Global Privacy Control signal as a request to opt out.

If you live in the EU, the EEA, the UK or Switzerland#

Why we're allowed to use your information: running your account, signing you in, checking your license, delivering what you bought and sending the emails that go with it are all necessary to give you what you asked for (Article 6(1)(b) GDPR). Stopping abuse, keeping security records and keeping the tax records we're required to keep in the US rest on our legitimate interests (Article 6(1)(f)). The release list, and any marketing email, rests on your consent (Article 6(1)(a) GDPR). You can withdraw it with the unsubscribe link in every one. Problem reports and contact messages rest on our legitimate interest in answering you and fixing StitchWing (Article 6(1)(f)), or on our contract with you where it's about something you bought (Article 6(1)(b)). Testimonials rest on your consent (Article 6(1)(a)). You can withdraw it at any time, and we'll take the testimonial down. The tester list rests on your consent (Article 6(1)(a)), which you give with the tick box and can withdraw with the link in every email. If we invite you to test, holding your details and sending the one invitation rest on our legitimate interest in inviting people to try StitchWing (Article 6(1)(f)). You can object to this at any time: reply to the invitation and say so, or write to us. Once you claim it, your test is part of your account (Article 6(1)(b)). Keeping your name on it, looking at who's taking part and, if we switch it on for a test, linking your reports to your account rest on our legitimate interest in running a test that works and giving places to people who take part (Article 6(1)(f)). You can object, and the simplest way is to end your test. What beta versions send us rests on your consent (Article 6(1)(a)): the separate box you tick when you signed up or claimed your invitation. You can withdraw it at any time with "Stop sharing" in the app's Settings, and your test carries on. Keeping the record of what you agreed to when you bought rests on our legitimate interest in being able to show what was agreed if a payment is disputed (Article 6(1)(f)), and we keep it after you close your account for the same reason (Article 17(3)(e)).

Your rights: you can ask us to give you a copy of, correct, delete, restrict or transfer your information, and you can object to our using it. Email support@stitchwing.com. We answer within one month.

How to reach us from Europe or the UK: write to support@stitchwing.com, or to the postal address under "Who we are" at the top of this page. StitchWing is a small business run from the United States with no office in Europe or the UK, so your request lands with the people who can actually act on it rather than with an intermediary. We answer in English.

Complaints: please tell us first — we'll acknowledge within 30 days and tell you what we've done. You can also complain to your data protection authority. In the UK that's the Information Commissioner's Office, ico.org.uk.

Automated decisions: we don't make any decisions about you by automated means that have legal or similar effects. Our console labels testers from simple counts, but a person decides whether to end anyone's test.

If you live in a US state with a privacy law#

In the last 12 months we have not sold or shared personal information as those laws define it, and we have no plans to. What we collect falls into these categories: identifiers (your email address, your full name for your account, and names supplied for testing invitations or gifts, account ID, the one-way code for your computer or iPad app installation, IP addresses); customer records (billing details, held by our payment processor); commercial information (what you bought); your account login and password, used only to sign you in; the content of reports, messages and testimonials you send us; if you sign up to test, the answers you give us (your crafts, experience with charts and the charting software you use); and, only from beta versions for testers who agreed, information about how you use the app (which days you opened it, feature counts and crash and error reports); information about the app on your computer that goes with a report (app version, operating system, processor type, the recent app log); and, if you choose to attach a pattern, the pattern and any pictures in it. It comes from you (including when you join the release list or sign up to test), from the StitchWing app on your computer or iPad, from a gift giver (the recipient name/email, message and delivery choices described under Gifts), from our website payment processor and Apple (transaction, subscription, renewal and refund records), from what you send us in reports, messages and testimonials, from a beta version of the app if you're testing and agreed, and from us, when we type in your name and email address to invite you to test. The kinds of outside companies we disclose it to are listed under "Where your information goes, and how long we keep it" above. When we publish a testimonial, it's at your direction and with your permission. That isn't selling or sharing your information. Your rights are the ones in "Your choices" above; you may use an authorised agent, and if we turn down a request you can appeal by replying to our answer.

15. Children#

StitchWing is made for a general audience — people who crochet, knit and cross stitch, from teenagers to retirees. It isn't directed at children under 13, and we don't knowingly collect personal information from them. Accounts are for adults, or for a teenager whose parent or guardian set the account up and looks after it. We only accept testimonials, tester sign-ups and testers from people 18 or over.

If you believe a child under 13 has given us personal information, email support@stitchwing.com and we'll delete it.

For everyone under 18: StitchWing has no ads, sells no data, does no profiling, collects no location, and has no streaks, nudges or anything else designed to keep you using it.

16. How we protect it#

• Every connection to our servers is encrypted (HTTPS).
• Passwords are stored scrambled, never in the clear. License keys are stored scrambled for lookup, plus an encrypted copy only you can unlock.
• The app keeps its sign-in token in your computer's own secure store — Windows Credential Manager, the macOS Keychain or the iPad Keychain — not in an ordinary file. The token is bound to the app's device code and checked against your account.
• Wrong passwords are counted and the account locks for a while after a few tries.
• Resetting or changing your password immediately ends every signed-in session everywhere.
• Report attachments stay on our own server. They're never sent by email, not even to us.
• Invitation links work once, only for the address they were sent to, and we store them scrambled. Beta usage counts and crash reports are stored on our own server, like reports.
• The admin console is protected by a passkey, with a limited fallback for when that device isn't to hand, and every action taken there is recorded in a log that can't be edited or deleted.

No system is perfectly secure. If a breach affects your information, we'll tell you, as the law requires.

17. Changes to this page#

When we change this page we'll change the "Last updated" date at the top. If a change matters — if it changes what we collect or what we do with it — we'll email account holders and put a notice on stitchwing.com and in the app at least 30 days before it takes effect.

18. Contact us#

Email support@stitchwing.com about your information, the app or your order.

Our company name and postal address are at the top of this page, under "Who we are." Post reaches us; email reaches us faster.