Privacy Policy
Last Updated: December 1, 2025
Effective Date: December 1, 2025
1. Introduction
Welcome to CrochetPoint (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website at crochetpoint.com (the “Website”) and our crochet pattern management services.
By using our Website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Website.
Contact Information:
- Website: crochetpoint.com
- Email: contact@crochetpoint.com
- Business Name: CrochetPoint
- Location: Poland
2. Information We Collect
2.1 Information You Provide to Us
When you use our Website, we may collect the following personal information:
Account Registration:
- Email address
- Username
- Password (encrypted)
- Display name (optional)
- Profile information (optional)
Membership Information:
- Membership tier (Free or Premium)
- Payment information (processed by our payment processor – see Section 7)
- Subscription status and billing history
Pattern Data:
- Crochet patterns you create, edit, and save
- Pattern metadata (titles, descriptions, categories, difficulty levels)
- Cover images or emojis you upload or select
- Pattern-related notes and markers
- Video tutorial links you add
Usage Data:
- Pattern tracking information (current row, progress percentage)
- Timer session data (time spent crocheting, session history)
- Project statistics (total crochet time, completion rates, session counts)
- Pattern interaction history (creation dates, last opened dates)
Communications:
- Messages you send us through contact forms or email
- Support requests and correspondence
- Feedback and survey responses
2.2 Information Automatically Collected
We automatically collect certain information when you visit our Website:
Technical Information:
- IP address
- Browser type and version
- Operating system
- Device information (desktop, mobile, tablet)
- Screen resolution
- Referring website
- Pages visited and time spent on pages
- Click patterns and navigation paths
Cookies and Similar Technologies:
- Session cookies (required for login and functionality)
- Preference cookies (to remember your settings)
- Analytics cookies (to understand how you use our site)
- WordPress cookies (for authentication and management)
For more details, see Section 4 (Cookies).
2.3 Information We Do Not Collect
- We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data
- We do not knowingly collect information from children under 13 years of age
- We do not track your activity across other websites (no cross-site tracking)
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Provision
- Create and manage your account
- Enable you to create, save, edit, and organize crochet patterns
- Track your pattern progress and timer sessions
- Calculate and display your crochet statistics
- Provide pattern library and search functionality
- Differentiate between Free and Premium membership features
3.2 Membership Management
- Process membership registrations and upgrades
- Manage subscription billing and renewals
- Enforce pattern storage limits based on membership tier
- Provide access to premium features (timer, statistics, unlimited storage)
3.3 Communication
- Send important service updates and security notices
- Respond to your inquiries and support requests
- Send transactional emails (password resets, subscription confirmations)
- With your consent, send newsletters and promotional content (you can opt out anytime)
3.4 Website Improvement
- Analyze usage patterns to improve our services
- Monitor and fix technical issues
- Conduct research and testing of new features
- Enhance user experience and interface design
3.5 Security and Fraud Prevention
- Protect against unauthorized access
- Detect and prevent fraudulent activity
- Enforce our Terms of Service
- Comply with legal obligations
3.6 Legal Compliance
- Respond to legal requests and court orders
- Protect our rights and property
- Investigate violations of our policies
4. Cookies and Tracking Technologies
4.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our Website. They help us recognize you, remember your preferences, and improve your experience.
4.2 Types of Cookies We Use
Strictly Necessary Cookies:
- WordPress authentication cookies (to keep you logged in)
- Session cookies (to maintain your session across pages)
- Security cookies (to protect against CSRF attacks)
- These cookies are essential for the Website to function and cannot be disabled
Functionality Cookies:
- User preference cookies (to remember your settings)
- Pattern editor state (to preserve your work)
- Timer session cookies (to maintain timer accuracy)
Analytics Cookies:
- We may use analytics services (like Google Analytics) to understand how visitors use our Website
- These cookies collect aggregated, anonymized data about page visits, time spent, and user behavior
- You can opt out of analytics cookies through your cookie preferences
4.3 Managing Cookies
You can control and manage cookies through your browser settings. You can:
- Block all cookies
- Accept only first-party cookies
- Delete cookies after closing your browser
- Receive notifications when cookies are being set
Please note: Disabling strictly necessary cookies will prevent you from using essential features like logging in and saving patterns.
4.4 Third-Party Cookies
Our Website may use third-party services that set their own cookies:
- Payment processors (for subscription billing)
- Analytics providers (for usage statistics)
- Content delivery networks (for faster page loading)
We do not control these third-party cookies. Please review their privacy policies for more information.
5. Data Storage and Security
5.1 Where We Store Your Data
Your information is stored on secure servers provided by lh.pl. Data is stored in Poland.
WordPress Database:
- User account information
- Pattern data and metadata
- Progress tracking information
- Timer session history
- All data is stored in WordPress database tables
Browser Storage:
- We use browser localStorage for temporary data (unsaved patterns)
- This data remains on your device only and is not transmitted to our servers
- Clearing your browser data will delete this information
5.2 How We Protect Your Data
We implement appropriate security measures to protect your personal information:
Technical Safeguards:
- SSL/TLS encryption for data transmission (HTTPS)
- Encrypted password storage (bcrypt hashing)
- Secure database access controls
- Regular security updates and patches
- Firewall protection
- DDoS protection
Organizational Safeguards:
- Limited employee access to personal data
- Regular security training
- Data backup procedures (using WPvivid plugin)
- Incident response procedures
Access Controls:
- Two-factor authentication available for accounts
- Automatic session timeouts
- Brute force attack protection
- IP blocking for suspicious activity
5.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide services:
- Active accounts: Data retained indefinitely while account is active
- Deleted accounts: Personal data permanently deleted within 30 days
- Backup copies: May exist for up to 30 days in backup files
- Legal retention: Some data may be retained longer to comply with legal obligations
You can request deletion of your account and data at any time (see Section 10).
5.4 Data Backups
We maintain regular backups of our database to protect against data loss:
- Backups are encrypted and stored securely using WPvivid plugin
- Backups are retained for 30 days
- Backup deletion follows the same procedures as active data
6. Data Sharing and Disclosure
6.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6.2 When We Share Your Data
We may share your information in the following circumstances:
Service Providers: We share data with trusted third-party service providers who help us operate our Website:
- Hosting provider (for server infrastructure)
- Payment processor (for subscription billing – see Section 7)
- Email service provider (for transactional emails)
- Analytics providers (for usage statistics)
- Backup services (for data protection)
These providers are contractually obligated to protect your data and use it only for specified purposes.
Legal Requirements: We may disclose your information if required by law or in response to:
- Court orders or subpoenas
- Government or regulatory requests
- Legal proceedings or investigations
- Protection of our rights, property, or safety
- Enforcement of our Terms of Service
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and your options.
With Your Consent: We may share your information with third parties when you explicitly consent to such sharing.
6.3 Pattern Sharing (Future Feature)
When we implement pattern sharing features, you will have control over:
- Whether patterns are private or public
- Who can view your shared patterns
- What information is visible in shared patterns
We will update this Privacy Policy before implementing public pattern sharing.
7. Payment Processing and Billing
7.1 Payment Processor
We use Paid Memberships Pro (PMPro) plugin with PayPal as our payment processor to handle subscription billing for Premium memberships.
What Payment Information We Collect:
- We do NOT store your credit card numbers or payment details on our servers
- Payment information is collected and processed directly by PayPal
- We receive only:
- Transaction confirmation
- Subscription status
- Last 4 digits of card (for your reference)
- Billing email address
7.2 Subscription Information
For Premium memberships, we store:
- Subscription tier and status (active, cancelled, expired)
- Billing cycle (monthly, annual)
- Subscription start and end dates
- Transaction IDs for record-keeping
- Refund and cancellation history
7.3 Payment Processor Privacy
Please review the privacy policy of our payment processor:
- PayPal: https://www.paypal.com/privacy
7.4 Refunds and Cancellations
See our Terms of Service for complete details on cancellations and refunds. When you cancel your subscription:
- Your payment information is removed from our systems
- You retain full Premium access until the end of your billing period
- After your billing period ends, you will be prompted to select which 10 patterns to keep active
- The 10 oldest patterns are selected by default, but you can change this selection
- Active patterns (your chosen 10): Full functionality maintained
- Locked patterns (beyond your 10): Cannot be opened, edited, or tracked
- If you delete an active pattern, you can unlock a different locked pattern to replace it
8. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
8.1 Access and Data Portability
Right to Access:
- You can view most of your data through your account dashboard
- You can request a copy of all personal data we hold about you by emailing contact@crochetpoint.com
- We will verify your identity and respond within 30 days
- We will provide this data in a commonly used format (PDF or text file)
8.2 Correction and Update
Right to Correction:
- You can update most information through your account settings
- You can edit pattern metadata through the Pattern Library
- For data you cannot edit yourself, contact us to make corrections
8.3 Deletion (Right to be Forgotten)
Right to Deletion:
- You can request complete account and data deletion by emailing contact@crochetpoint.com
- Include “Account Deletion Request” in the subject line
- We will verify your identity and permanently delete your data within 30 days
- Deletion is permanent and cannot be undone
Exceptions:
- We may retain certain data to comply with legal obligations
- Backup copies may exist for up to 30 days before permanent deletion
- Anonymous statistical data may be retained
What Gets Deleted:
- Your account and login credentials
- All your patterns, progress data, and statistics
- All personal information associated with your account
- Timer session history and tracking data
8.4 Objection and Restriction
Right to Object:
- You can object to certain types of data processing
- You can opt out of marketing emails (unsubscribe link provided)
- You can disable non-essential cookies
Right to Restrict Processing:
- You can request we limit how we process your data
- This may affect your ability to use certain features
8.5 Withdraw Consent
Where we process your data based on consent (e.g., marketing emails), you can withdraw consent at any time:
- Unsubscribe from emails using the link in each message
- Update email preferences in account settings
- Contact us to withdraw specific consents
8.6 Lodge a Complaint
If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority:
EU/EEA Residents:
- Contact your national Data Protection Authority
- List available at: https://edpb.europa.eu/about-edpb/board/members_en
UK Residents:
- Information Commissioner’s Office (ICO)
- Website: https://ico.org.uk
US Residents:
- Federal Trade Commission (FTC)
- Website: https://www.ftc.gov
9. International Data Transfers
9.1 Data Location
Our servers are located in Poland. If you access our Website from outside Poland, your information may be transferred to, stored, and processed in Poland.
9.2 EU/EEA Users
If you are located in the European Economic Area (EEA), we ensure appropriate safeguards for international data transfers:
- Standard Contractual Clauses (SCCs) with service providers
- Adequacy decisions by the European Commission (where applicable)
- Your consent for specific transfers
9.3 California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt out of sale of personal information (we do not sell data)
- Right to deletion
- Right to non-discrimination for exercising your rights
To exercise your CCPA rights, contact us at contact@crochetpoint.com.
10. Children’s Privacy
Our Website is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information:
- Contact us immediately at contact@crochetpoint.com
- We will delete the information as quickly as possible
- We will terminate the account
If we discover we have collected information from a child without parental consent, we will delete it immediately.
11. Third-Party Links
Our Website may contain links to third-party websites, services, or resources:
- We are not responsible for the privacy practices of these sites
- We do not endorse or control third-party content
- Please review their privacy policies before providing personal information
- This Privacy Policy applies only to crochetpoint.com
Examples of Third-Party Links:
- YouTube videos embedded in pattern tutorials
- Payment processor websites (Stripe, PayPal)
- Social media links (if applicable)
12. Do Not Track Signals
Some browsers offer “Do Not Track” (DNT) features. Our Website does not currently respond to DNT signals because there is no industry standard for how to respond to them. We do not track your activity across other websites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Legal, regulatory, or technical requirements
- New features or services
13.1 How We Notify You
When we make significant changes:
- We will update the “Last Updated” date at the top of this policy
- We may display a prominent notice on our Website
- We may send you an email notification (if required by law)
- Continued use of our Website after changes constitutes acceptance
13.2 Previous Versions
Previous versions of this Privacy Policy will be archived and available upon request.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Primary Contact:
- Email: contact@crochetpoint.com
- Response time: We aim to respond within 48 hours
Business Information:
- Business Name: CrochetPoint
- Location: Poland
- Website: crochetpoint.com
15. Definitions
Personal Information: Information that identifies, relates to, or could reasonably be linked to you.
Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
Cookies: Small text files stored on your device when you visit a website.
Service Providers: Third-party companies we use to facilitate our services.
GDPR: General Data Protection Regulation, EU privacy law.
CCPA: California Consumer Privacy Act, California privacy law.
Account: Your registered user profile on crochetpoint.com.
Pattern Data: Crochet patterns you create, including rows, markers, metadata, and related information.
16. Legal Basis for Processing (GDPR)
For users in the EU/EEA, we process your personal data based on the following legal grounds:
Contract Performance:
- Creating and managing your account
- Providing pattern creation and tracking services
- Processing membership subscriptions
Legitimate Interests:
- Improving our services and user experience
- Security and fraud prevention
- Analytics and research
Consent:
- Marketing communications (you can withdraw anytime)
- Non-essential cookies (you can disable through cookie settings)
Legal Obligation:
- Compliance with tax and financial regulations
- Responding to legal requests
17. Data Security Incidents
In the unlikely event of a data breach that affects your personal information:
- We will investigate the incident immediately
- We will notify affected users without undue delay
- We will report the breach to relevant authorities as required by law
- We will take steps to mitigate the impact and prevent future incidents
If you suspect unauthorized access to your account:
- Change your password immediately
- Contact us at contact@crochetpoint.com
- Enable two-factor authentication (if available)
18. Your California Privacy Rights (Shine the Light Law)
California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not share personal information with third parties for their direct marketing purposes.
19. Nevada Residents
Nevada residents have the right to opt out of the sale of personal information. We do not sell personal information as defined under Nevada law. If you have questions, contact us at contact@crochetpoint.com.
20. Consent
By using our Website, you consent to this Privacy Policy and our collection, use, and sharing of your information as described herein.
Document Version: 1.0 Policy ID: PP-2024-001
Quick Reference: Your Data Rights
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Get a copy of your data | Email contact@crochetpoint.com |
| Correction | Fix incorrect data | Edit in account settings or email us |
| Deletion | Delete your data | Email contact@crochetpoint.com |
| Objection | Object to certain processing | Email us with specific objection |
| Restriction | Limit how we use your data | Email us with specific request |
| Withdraw Consent | Stop marketing emails | Click unsubscribe or update preferences |
| Lodge Complaint | Report privacy violations | Contact your data protection authority |
This Privacy Policy was last reviewed and updated on December 1, 2025.
Thank you for trusting CrochetPoint with your crochet patterns and personal information. We are committed to protecting your privacy and providing you with a secure, enjoyable experience.