Privacy and your stitch data
Personal photos and browser storage
The converter turns photos into stitches on your device. Personal conversion and ordinary PDF export do not upload your source photo. IndexedDB holds the current project, settings and any source photo locally so you can resume editing. Local storage remembers your color theme. Clear this site's browser data to remove those local copies.
The application does not set login or tracking cookies and does not include a visitor analytics service. Private links grant access without a login; keep them out of public posts.
When you choose a save link or tracker QR
The server stores the chart (including its name, stitch grid, threads and layers), print settings, versions and marked stitch progress in SQLite. Anyone with a personal save link can read and change its chart and progress. Turning off the tracker QR lets you export a PDF locally.
Each saved pattern is limited to 4 MiB. We keep the latest 20 chart versions. The link expires 30 days after the last changed chart save. Marking progress or saving an identical chart does not extend it. Expired charts become inaccessible; database cleanup removes them on startup or during saves.
Seller workspaces and buyer orders
The server stores shop names, workspace and buyer links, template options, plan state and orders in SQLite. Previewing a buyer photo stays on the device. Submitting requires consent and sends the buyer label, chosen fields, chart and any supplied JPEG or PNG (up to 8 MiB) to the seller's workspace. New orders record submission consent. A proof signature stores the typed name, approval statement, version and time; it does not verify identity.
A seller can retrieve the photo, revise the chart and prepare a branded PDF. A buyer's delivery tracker keeps the approved chart fixed while allowing progress changes. The tracker expiry does not delete the original order. Seller orders, photos and signatures have no automatic expiry. Contact us to request deletion.
Infrastructure, email and future payments
Cloudflare handles our domain's DNS and routes support email to the operator's inbox. If you email us, we use your address and message to handle the request. The site has not yet launched publicly. The planned host is a self-managed server running Dokploy; the infrastructure provider has not been selected. No paid plans are sold. When paid plans launch, Waffo Pancake will handle checkout and billing as merchant of record.
Access, correct or delete your data
Email support@crossstitchgo.com with your shop name or order reference and the change you want. We may need more information to locate the record and confirm that you can request the change. Browser-only projects can be removed on your own device.