Privacy Policy

1. Information we collect

• Google account details (optional). If you choose to sign in with Google, we receive your email address, display name, and profile picture URL from Google. We use these to create and identify your account. You can use the generator without signing in.
• Technical data. To enforce rate limits and daily generation quotas, we process your IP address for the duration of the rate-limit window (about one hour), after which it is discarded. For traffic statistics we store only a salted hash of your IP address that is regenerated every day, together with your browser user-agent string and the approximate country resolved from a copy of the MaxMind GeoLite2 database that we query locally — your IP address is never sent to a third party for geolocation. We use this to count visits and to tell real visitors apart from automated traffic.
• Content you submit. The text prompts and images you send to the generator are stored with the resulting pattern so that you can view it again later.
• Generated patterns. Pattern titles, difficulty, pattern JSON, stitch-audit results, and timestamps are stored with your account (or as an anonymous record if you are not signed in).

2. How we use your information

• To generate crochet patterns from your prompt or image and return them to you.
• To enforce free-tier quotas (2 generations per day for anonymous visitors, 10 per day for signed-in users) and to prevent automated abuse of the generation endpoint.
• To keep your pattern history available to you and to display patterns you explicitly choose to make public.
• To understand aggregate usage and keep the service reliable and secure.

We do not sell your personal information, and we do not use your content for advertising.

3. Cookies and sessions

We use a small number of strictly functional cookies. They are signed, HttpOnly, and used only to keep you signed in:

• knitcraft_user_session — identifies your signed-in KnitCraft account for up to 30 days.
• knitcraft_admin_session — identifies an authenticated site administrator for up to 7 days.

We do not set advertising or third-party tracking cookies. Because these cookies are essential to signing in, clearing them simply signs you out.

4. Third-party services

• Google Sign-In. Google verifies your identity and returns your account email, name, and avatar. Google's handling of your account data is governed by Google's Privacy Policy.
• LLM API provider. To generate a pattern, we send your prompt and, if provided, your image to a third-party large language model API provider. That provider processes the request to return the pattern text. We send only the content needed for generation.
• Hosting infrastructure. The service runs on our own server. Our reverse proxy keeps standard request logs for security and operations; these are rotated and deleted regularly.

5. Data retention

Account information and generated patterns are retained while your account exists and until you delete the pattern (or permanently delete your account from the My Patterns drawer). Soft-deleted patterns are excluded from the app but remain until you delete them or delete your account. Rate-limit events are deleted after about one hour. Visit logs — the hashed IP address, country, page path and user agent — are automatically deleted after 90 days. Geolocation is resolved on our own server, so no visitor IP address is transmitted to a third-party geolocation service.

6. Your rights

Signed-in users can exercise their access and deletion rights directly, without contacting support. Open the My Patterns drawer and choose Download my data (JSON) to export a JSON copy of your account details, all of your generated patterns (including soft-deleted ones), and your visit records. The same drawer offers Delete my account, which permanently removes your account together with all generated patterns and visit records.

Deleting your account from the app is immediate and irreversible. Aggregate counters that contain no personal data (such as total daily generation counts) are retained.

You can also make any pattern private or delete it directly in the app. If you prefer, you may contact us at support@knitcraft.ink and we will respond within a reasonable period.

7. Children

KnitCraft AI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to this policy

We may update this policy as the service changes. We will post the revised version on this page and update the "Last updated" date above. Continued use of KnitCraft AI after a change means you accept the revised policy.

9. Contact

Questions about this policy? Email support@knitcraft.ink.