Privacy

Who we are

criscros runs the website www.criscros.co from the United States. For anything about your data, write to support@criscros.co.

What we collect

Your account. Your email address, and your password in a scrambled form that cannot be turned back into the password.
Your photos and patterns. The photos you upload, the patterns made from them, the names you give them, the threads you tick off and the patterns you pin. When you upload a photo it is rewritten before it is stored, so that only the picture is kept: the information a camera or phone adds, including where the photo was taken, is removed.
Your payments. Payment is taken by Stripe on Stripe's own page. We receive a record that a payment was made and which account it was for. We never receive your card number. If you delete your account, the record stays, with no name or email address on it.
Your messages. Emails you send to us, and our replies.
Records of requests. Like most websites, our servers record each request they receive: the address of the page, the time, and the internet address and type of browser it came from. These records are kept for a limited time and are used to keep the site working and secure.
A count of visitors. To know how many people visit, we count each visitor once a day, without a cookie. Your internet address and the type of your browser are scrambled together with a random value that is replaced every day. What is kept cannot be turned back into either of them, and cannot be linked to you on another day.

What we use it for

To make and show you your patterns, to take payment, to answer you when you write, and to keep the site secure. We do not sell your data, we do not show advertising, and your photos are not used for anything but making your own patterns.

Cookies and what is kept in your browser

Always: one cookie that keeps you signed in. It lasts 24 hours and is not used for anything else. Your browser also remembers how you last set up the pattern viewer.
Only if you accept: Google Analytics cookies, which let us count visits and see which pages are used. Until you accept, nothing is sent to Google. Your choice is remembered in your browser, and you can change it at any time with "Cookie settings" at the foot of any page. If your browser sends the Global Privacy Control signal, we treat that as declining.

If you accept, Google receives which pages of this site you view, the type of device and browser you use, and roughly where you are, which Google works out from your internet address. It is not told your email address, and it does not receive your photos. Advertising features are switched off. Google keeps this information for up to 14 months.

Who else handles your data

We use other companies to run the site, and each receives only what it needs for its part: companies that host the website and store its data, a company that sends our email and one that receives it, Stripe, which takes payments, and Google, for Google Analytics, only if you accept it.

Your account, photos and patterns are stored in the United States. Some of these companies may also handle data in other countries.

How long we keep it

Your account, photos and patterns are kept until you delete them. Deleting a single pattern removes it from your list; it is deleted for good with its photo, or with your account.

What you delete is gone from the site straight away. Copies in our backups take up to 30 days to go.

Seeing, correcting or deleting your data

You can delete a photo, or your whole account, yourself. Delete photo is beside each photo on your photos page. Delete my account is on your account page. Both ask you to confirm twice. Deleting a photo deletes its patterns too. Deleting your account deletes every photo and pattern, and any upload credits you have not used. We send you an email to say it is done.

For a copy of what we hold about you, or for a correction, write to support@criscros.co from the email address of your account. You can also ask us there to delete your photos or your whole account for you. We will do it within 30 days.

If you are in the European Union or the United Kingdom, these are among your rights under data protection law, and you can also contact your data protection authority.

Children

criscros is for adults. It is not meant for anyone under 18, and we do not knowingly collect their data.

Changes

If this page changes, the date at the top changes with it.