Privacy Policy

What we collect

• Your account: your name and email address, and your password if you set one (stored only as a secure hash). If you sign in with Apple or GitHub, we receive your name and email address from them. Apple may give us a private relay address instead of your real one.
• What you add: your projects, notes, photos, looms, drafts and settings, such as your preferred units.
• Sign-in sessions: for each signed-in device we keep the IP address and browser or device type, so sessions can be secured and ended.
• Error reports: when something goes wrong, details of the error, the page or request involved, and your browser or device type.

We use this only to run WeaveDB for you. We don't show ads, we don't sell or share your data with advertisers or data brokers, and we don't track you across other apps or websites.

Who can see your data

Your projects, notes, photos, looms and drafts are private to your account. The site administrator can see account details (name, email and sign-in methods) to keep the service running and to deal with abuse.

Services that help run WeaveDB

• Vercel hosts the website and the server.
• Turso stores the database: your account, projects, notes, looms, drafts and settings.
• Cloudflare R2 stores your photos.
• Resend sends account emails, such as email verification, password resets and account deletion confirmations.
• Sentry receives error reports. On the website it also records a small sample of sessions to help us fix bugs, with all text and form entries masked.
• Apple and GitHub handle sign-in if you choose to sign in with them.

Cookies and storage on your device

The website uses cookies only to keep you signed in and to protect forms against forgery, and your browser's local storage to remember your light or dark theme. There are no advertising or analytics cookies. The iPhone and iPad app keeps a copy of your data on the device so it works offline, and keeps your sign-in in the device's Keychain. Signing out removes both.

Deleting your account

You can delete your account at any time from Settings → Delete account on the website. We email you a link to confirm. Once you confirm, your account and everything in it (projects, notes, photos, looms, drafts and settings) are permanently deleted. You can also email us to ask for your data to be deleted or for a copy of it.

Children

WeaveDB is not directed at children under 13, and we don't knowingly collect their information.

Changes to this policy

If we change this policy, we'll update it here and change the date at the top. For significant changes, we'll also email you.

Contact

Questions about your privacy or your data: weavedb@whiskeyknits.com.