Privacy Policy

Rhinestone Pattern Maker acts as the data controller for the information described in this policy. This policy explains what information we collect, how we use it, and the choices you have. If you have questions, email contact@rhinestonepatternmaker.com.

• Account information: your email address and password. Your password is handled by our authentication provider (Firebase Authentication). We never see or store it in plain text.
• Your photos: processed entirely in your browser. Your original photo is never uploaded to or stored on our servers.
• Pattern data: when you export a pattern, we store the generated pattern file (an SVG of colors, stone counts, and legend, not your original photo) along with minimal metadata (an internal pattern ID, your account ID, creation date, and payment status) so it appears in "My Patterns" and can be re-downloaded later.
• Payment information: handled directly by Stripe. We don't collect or store your card number. We store limited billing status synced from Stripe (such as whether you have an active subscription and when it renews or ends) to control access to exports.
• Technical information: our infrastructure providers (Firebase Hosting, Google Cloud) automatically log standard technical data, like IP address, browser type, and request timestamps, which we use for security and debugging.

We use this information to:

• Operate your account and let you sign back in.
• Generate, deliver, and let you re-download your patterns.
• Process payments and manage subscriptions.
• Prevent abuse of the free preview tier and keep the service secure.
• Respond to support requests.

If you're located in the EU, EEA, or UK, we process your information based on:

• Performance of a contract: to create your account, generate and store your patterns, and process your payments.
• Legitimate interests: to prevent abuse of the free tier and keep Rhinestone Pattern Maker secure.
• Legal obligation: where we need to keep records for tax or accounting purposes.

We use the following service providers to operate Rhinestone Pattern Maker, each of which processes data under its own privacy policy:

• Firebase (Google Cloud Platform) for authentication, our database, file storage, and serverless functions.
• Stripe for payment processing and subscription billing.

Your data may be processed on servers outside your country. Where that happens, these providers rely on mechanisms like Standard Contractual Clauses to safeguard the transfer.

Patterns you start exporting but never pay for are automatically deleted after about 24 hours. Patterns you've paid for are kept until you ask us to delete them or delete your account. Account information is kept while your account is active.

We use industry-standard technical and organizational measures, including Firebase's security infrastructure and access controls, to protect your information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated patterns.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority, if you're in the EU, EEA, or UK.

We don't sell or share your personal information, so there's nothing to opt out of. To exercise any of these rights, email contact@rhinestonepatternmaker.com, or manage your subscription directly from the account menu's "Manage subscription" link.

We use browser storage to keep you signed in via Firebase Authentication. We don't use third-party advertising or tracking cookies.

We only send you transactional emails related to your account, patterns, and payments, for example password resets or payment receipts. We don't send marketing emails, and if that ever changes, we'll give you a clear way to opt out.

Rhinestone Pattern Maker isn't directed at children, and we don't knowingly collect information from anyone under 16 without the consent of a parent or guardian.

We may update this policy from time to time. We'll update the "last updated" date above when we do.

Questions about this policy? Email contact@rhinestonepatternmaker.com.