Privacy, plainly.
Effective October 29, 2026. This policy describes how Needle Nook handles information on this website.
Photos for charts stay on your device
When you make a cross-stitch or needlepoint chart, your photo is read and converted by code running in your own browser. The photo is never uploaded to our servers. If you save a chart with Studio Pass, we store only the finished chart (the grid of chart colors) and the settings you chose.
Pet portrait patterns
The pet portrait funnel works the same way: the photo is framed and charted in your browser and is not uploaded. While you work, the framed photo is kept in your browser's session storage so you can change the size or craft; it is cleared when the tab closes or when you start another pet. When you build the pattern we store the chart (its colors and grid), the pet name you typed, the craft, the size and the time, so the pattern page and the files work. Patterns that are not bought are deleted 30 days after they are made. Bought patterns are linked to your account and stay until you delete the account. The pattern page can be opened by anyone who has its link; it shows preview pictures drawn from the chart, the size, the stitch and color counts and the materials list, never your photo. When you buy pattern files we store the tier, the Stripe checkout session identifier, the amount, the currency and the date.
What we store
For accounts we store your name, email address, a securely hashed password, sign-in sessions, saved projects and their settings, AI credit balances and grants, a short-lived per-minute request counter, and whether you have Studio Pass or the credit plan, including Stripe customer and subscription identifiers. Payment card details are handled by Stripe and are never stored in our database.
Pattern Pack purchases
When you buy a Pattern Pack we store which pack you bought, the Stripe checkout session identifier, the amount and currency, and the date, so the pack stays on your account.
Kits waitlist
If you join the kits waitlist we store your email address, the kit you chose, whether you agreed to other marketing (unchecked unless you tick it), and when you joined. To limit abuse we keep a short-lived counter keyed by a one-way hash of your IP address; the IP address itself is not stored. We do not send emails from the waitlist form. To be removed, contact us at the address below.
AI helper
When you send a message to the AI helper, the message and recent conversation context are sent through Vercel AI Gateway to the configured AI model provider to generate a reply. We do not store the text of AI conversations in our database. Do not include sensitive personal information in your messages.
Service providers
The site is hosted on Vercel and records are stored in Neon Postgres. Stripe processes payments and runs the billing portal. Our email provider delivers password-reset emails. Each provider handles data under its own terms and only for the service it provides to us.
Cookies and browser storage
Essential cookies keep you signed in and protect authentication. Browser storage may remember small preferences, such as your analytics choice. If Google Analytics is enabled on this site, it runs only after you accept it in the consent banner, and never when your browser sends Do Not Track or Global Privacy Control. Advertising signals and ad personalization are disabled, and page views do not include account details, project content or URL query values.
Affiliate disclosure
As an Amazon Associate, Needle Nook earns from qualifying purchases. Supply lists open Amazon search pages in a new tab; when you click one, Amazon may set its own cookies under its privacy notice to credit the referral. We do not send your account details or project content to Amazon.
Your choices
You can delete saved projects at any time from your account, and you can delete your account, which removes your profile, sessions, projects and credit records. If you have an active credit plan, cancel it in the billing portal first. Stripe keeps payment records as required by law.
Children
Needle Nook is intended for adults. Accounts are not intended for children under 13.
Contact
For privacy questions or requests, contact the operator at contact@mediaatl.as.