Privacy policy

The short version

Needlepoint Diva is a one-woman pattern studio. This site is a catalog — not a shop, not a login system. We don't run analytics, advertising trackers, or customer accounts here. Payments and PDF delivery are handled by Polar, our Merchant of Record. When you buy a pattern, your data is held by Polar under their privacy policy, not ours.

What we don't collect

• No Google Analytics, Google Ads or Meta Pixel tracking.
• No Pinterest tag, Hotjar, session recording or fingerprinting.
• No advertising or analytics cookies.
• No third-party chat widgets, embedded social widgets or newsletter popups.
• No customer accounts, no newsletter sign-up, no contact form on this site.
• No payment card data — that lives only with Polar.

What we do collect

By default, only what your browser and our hosting provider need:

• Server / access logs. Our hosting provider (DigitalOcean) records basic request metadata — IP address, user agent, requested URL, response code, timestamp — for security, abuse prevention and operational health. We do not use these logs for analytics, advertising or profiling. Log retention is kept to the minimum necessary for our hosting tier.
• Email if you write to us. If you email the.needlepoint.diva@gmail.com, we receive whatever you send and the email headers. We use it only to reply to you.

What Polar collects

Checkout is hosted on Polar. When you click "Buy now", you leave this site for a Polar-hosted checkout page. Polar collects the information they need to take payment and deliver your file — name, email, billing address, payment method, order details — and may collect IP address and device information for fraud prevention. Polar is the Merchant of Record and may also calculate and remit consumer taxes (e.g. US sales tax, EU VAT).

Polar's full privacy practices are described in their privacy policy.

Embedded fonts

This site loads the Montserrat typeface from Google Fonts. When your browser fetches the font, Google may receive a request from your IP. We plan to self-host Montserrat in production to remove this dependency.

Cookies

We do not set any cookies on this site. Your browser may set nothing at all, or only its own defaults — but nothing Needlepoint Diva has asked for.

Children

This site and its products are not directed at children under 13, and we do not knowingly collect information from them.

Your rights

Depending on where you live (for example California, the EU/UK, or other jurisdictions with privacy laws), you may have rights to access, correct or delete personal data we hold about you. Because we hold almost nothing, most of these rights are simply already satisfied. Anything you sent us by email can be deleted on request.

For data held by Polar, please contact Polar directly using the methods described in their privacy notice.

Changes to this policy

If we change this policy in a material way — for example by enabling a third-party analytics tool — we'll update this page and the "Last updated" date above. We will never silently expand tracking.

Contact

Questions about privacy? Email the.needlepoint.diva@gmail.com.