Privacy Policy

About this policy

This policy explains how Crosy handles personal information when you use crosy.app. For privacy questions and requests, contact support@crosy.app.

Information we handle

• Account details: Your name, email address, profile image, sign-in and session information. If you choose Google sign-in, we receive the basic account information needed to sign you in, such as your name, email and profile-image address. We do not receive your Google password.
• Patterns and photos: Content you choose to save to your cloud library, including original images, pattern data, edits, stitching progress and organization details. Work saved only on your device stays in that browser's storage unless you use a feature that sends it to Crosy.
• Support requests: Messages, account or order references and attachments you send through support tickets or email.
• Purchases: Order references, purchased products, payment status, subscription status and credit records. Creem handles checkout and payment details; Crosy does not store full payment-card numbers.
• Service and security records: Information such as request times, IP addresses, browser information and errors needed to operate the service, investigate failures and prevent abuse.

Photo conversion and manual pattern editing run in your browser. Signing in does not automatically upload every device-only pattern. Free users choose patterns for cloud sync. Pro enables sync for new patterns by default, and you can turn it off per pattern. Some actions, including cloud saving, paid export authorization and Pro operations, contact the server to provide that feature.

How we use information

We use information to provide your account and chosen features, sync your work, deliver purchases, manage subscriptions and credits, send account verification and password-reset messages, respond to support requests, and protect Crosy and its users. We also use operational records to diagnose failures and improve reliability. We do not sell your personal information. We do not use your private photos or patterns for public marketing without your permission.

Service providers

We use providers to deliver the service, including Vercel for hosting, Supabase for the application database, and Cloudflare R2 for stored images and project files. Account images and support attachments are served through access-controlled Crosy routes. Access is limited to authorized account, support or ticket users. A Google profile image may remain hosted by Google.

Resend delivers automated account messages from no-reply@crosy.app. Zoho handles email sent to and from support@crosy.app and contact@crosy.app. Creem handles payments as merchant of record, and Google handles authentication when you choose its sign-in option. These providers process information needed for their role and may also have their own privacy obligations and policies.

Information may be processed outside your country. Where applicable, we use the contractual and other safeguards provided by these services. We may also disclose information when required by law or needed to address fraud, abuse or a threat to the rights or safety of users.

Cookies and browser storage

Crosy uses cookies and similar storage for sign-in sessions, security and preferences such as your theme. Browser storage also keeps device-only projects, edits and sync preferences. Removing that storage may sign you out or remove work that has not been saved elsewhere. Your browser lets you manage cookies and local storage.

Retention and deletion

We keep information for as long as needed to provide the features you use, resolve support or billing issues, protect the service and meet applicable legal obligations. Different records have different needs; for example, payment and fraud-prevention records may need to remain after account closure.

Turning off a pattern's sync stops further syncing and removes it from your active cloud library. Deletion is processed in the background, so it does not mean every stored copy disappears at the same instant. We do not promise a recovery window for cancelled sync or deleted content. Copies on your own device remain under your control. Contact support to request account deletion.

Your choices and rights

You can edit your profile, choose which patterns sync, remove content and manage your subscription within Crosy. You can request access to, correction of, export of or deletion of personal information by emailing support@crosy.app. Depending on your location, you may also have rights to restrict or object to processing or complain to a data-protection authority. We may need to verify your identity before acting on a request. Some information must be retained where required by law.

We use access controls and encrypted connections to protect information, but no online service can guarantee absolute security. Do not include passwords, sign-in codes or full card details in support messages or screenshots.

Changes and contact

The date above shows when this policy was updated. We will communicate material changes through the service or by email where appropriate. Privacy and account requests go to support@crosy.app. Brand and press enquiries go to contact@crosy.app.