Privacy Policy (Datenschutzerklärung)

Controller: Fatih Izciler, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany, info@knitcanvas.com. This policy explains what KnitCanvas stores about you and why (Art. 13 GDPR).

Account & projects. When you sign up we store your e-mail address (and, if you sign in with Google, the name Google's consent screen shares) and the projects you save — their charts, colours and settings. Legal basis: performance of the service you asked for (Art. 6(1)(b) GDPR). This data lives in our database at Supabase, hosted in the EU (Frankfurt region); Supabase acts as our processor under a data-processing agreement.

Version history. Alongside each chart we keep a short history of its earlier saved versions, so that work refused by a save conflict is not lost. This history is kept for a limited period and older versions are then deleted; it is not a backup service and there is no restore feature. Legal basis: legitimate interest in not losing your work (Art. 6(1)(f) GDPR).

Consent records. When you accept these documents, or ask for the newsletter, we record which document and version you accepted, the e-mail address it was accepted for, and the time our server recorded it. We are required to be able to demonstrate consent (Art. 7(1) GDPR); for newsletter consent German case law requires that the confirmation step can be shown for each subscriber individually. We do not store your IP address for this.

E-mail. Account e-mails — confirming your address, resetting your password — and, if you asked for them, product updates and the newsletter, are sent through Resend, which acts as our processor. Resend receives your e-mail address and the contents of those messages. For the newsletter, Resend also holds the list of current subscribers and handles unsubscribes.

On your device. A random device identifier is kept in your browser's local storage, used only to make sure a project is edited from one device at a time. It never leaves your browser except as part of a save. Your projects themselves are not cached in local storage — they live only in our database, autosaved as you work.

Usage statistics. We use Umami, a cookie-free analytics tool, to count anonymous page views and feature use (which screens are opened, never chart contents). No advertising, no cross-site tracking, no sale of data. Legal basis: legitimate interest in understanding what to improve (Art. 6(1)(f) GDPR).

Error reports. When something breaks, a technical report (error message, browser type, approximate app state — never your e-mail or chart contents by design) may be sent to Sentry so we can fix it. Legal basis: legitimate interest in keeping the service working (Art. 6(1)(f) GDPR). Sentry may process data outside the EU under the EU's standard contractual clauses.

Cookies. KnitCanvas sets no advertising or tracking cookies. Your sign-in session is kept in your browser's storage and is required for the service to work at all.

Retention & deletion. Your projects stay until you delete them; deleting your account removes your account data and every project stored under it. To delete your account, write to the address above.

Your rights. You can ask for access to, correction of, deletion of, or a copy of your data, restrict or object to processing, and lodge a complaint with a German data-protection authority (Art. 15–21, 77 GDPR). One e-mail to the address above is enough.