Privacy Policy

1. Introduction

Welcome to Quiltler. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Quiltler — our website and web app and our mobile apps for iPhone and iPad (collectively, the "App").

By using the App, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not use the App.

2. Information We Collect

2.1 Information You Provide to Us

Account Information

When you create an account, we collect:

• Email address
• Display name or username
• Password (your credentials are handled securely by Firebase Authentication; we never store your plaintext password)
• Profile information (optional)

User Content

We store content you create and upload, including:

• Quilt designs and configurations
• Custom patterns and cuts
• Fabric images and descriptions
• Color palettes
• Notes and annotations
• Shared public designs

Payment Information

We do not collect or store your full payment card details. Payment processing is handled entirely by our payment providers:

• Web purchases: Subscriptions bought on quiltler.com are processed by Stripe. Stripe collects and stores your payment details directly; we receive limited information such as your subscription status, plan, billing dates, and the last four digits and type of your payment card.
• App Store purchases: Subscriptions bought on iPhone, iPad, or Mac are processed by Apple. Apple may share limited information with us about your purchase, such as subscription status and purchase date, but not your payment details.

2.2 Information Collected Automatically

Usage Data

We automatically collect information about your use of the App:

• Features used and frequency of use
• Time spent in the App
• Actions performed (creating designs, browsing patterns)
• Errors and crash reports
• Performance metrics

Device & Browser Information

We collect information about the device or browser you use:

• Device model and operating system version (on iPhone and iPad)
• Browser type and version, and general device type (on the web)
• Unique device identifiers
• App or web build version
• Language and region settings
• Screen resolution and display metrics
• Referring page or campaign (when you arrive at quiltler.com from a link or ad)

Log Data

Our servers automatically record information, including:

• IP address
• Access times and dates
• Features viewed or accessed
• Actions taken in the App

2.3 Information from Third Parties

If you choose to sign in using third-party authentication (e.g., Apple Sign In or Google Sign In), we receive limited information from that service as permitted by you and their privacy settings.

Authentication & Session Data (Web App)

When you sign in to the web app at quiltler.com, we (through Firebase Authentication) create and store authentication tokens and a session identifier so you stay signed in. These are kept in your browser's local storage or in cookies and are used only to keep you securely logged in, sync your designs, and protect your account. Signing out or clearing your browser storage removes them.

2.4 Referral & Creator Attribution Data

Quiltler runs a creator and affiliate program. To credit the creators and campaigns that introduce new quilters to us, we record how you first arrived and connect that to any purchase you later make:

• First-touch attribution cookie: When you arrive at quiltler.com from a link, ad, or creator referral, we store a first-party cookie (named qtlr_attr) for up to 90 days. It records where that first visit came from — the referring page, any campaign parameters (such as UTM tags), the landing page, and the timestamp. First touch wins: the cookie keeps your original source and is not overwritten by later visits.
• Promo-code & creator-code attribution: If you arrive through a creator's link or apply a creator/affiliate promo code (for example a ref code), we record that code so the referral can be attributed to that creator.
• Attachment to your account: When you create an account or subscribe, we attach this attribution information to your account so we can determine which creator or campaign should receive credit for your first subscription.
• Conversion & commission records: We keep records of qualifying conversions and the resulting creator commissions (including reversals and payouts) for accounting, tax, and fraud-prevention purposes.

You can clear this cookie at any time through your browser settings; doing so does not affect your account or your ability to use Quiltler. See Section 13 for how to control cookies more generally.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Provide and Maintain Services

• Create and manage your account
• Store and sync your quilts, patterns, and designs across devices
• Process and fulfill your requests and transactions
• Provide customer support and respond to inquiries
• Enable community features (public pattern sharing)

3.2 Improve and Optimize

• Analyze usage patterns to improve App functionality
• Debug and fix technical issues
• Develop new features and enhancements
• Optimize performance and user experience

3.3 Communication

• Send important service announcements and updates
• Notify you about changes to our Terms or Privacy Policy
• Respond to your comments and questions
• Send promotional communications (with your consent)

3.4 Security and Fraud Prevention

• Detect and prevent fraudulent transactions and abuse
• Protect the security and integrity of the App
• Enforce our Terms of Service
• Comply with legal obligations

3.5 Analytics and Research

• Conduct data analysis and research
• Generate aggregate statistics about App usage
• Monitor and analyze trends and user preferences

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

When you choose to make designs or patterns public, other users can view and use that content. Your display name may be associated with public content you share.

4.2 Service Providers

We use third-party service providers to help us operate the App:

• Firebase/Google Cloud: For authentication, database storage, file storage, and cloud functions
• Stripe: For processing subscription payments made on the web
• Apple: For app distribution, in-app purchases, and push notifications
• Analytics providers: For usage analytics and crash reporting

These service providers have access to your information only to perform tasks on our behalf and are obligated to protect your information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• Protection of our rights, property, or safety
• Protection of users' safety or the public
• Prevention of fraud or illegal activity

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Storage and Security

5.1 Data Storage

Your data is stored using Firebase (Google Cloud Platform) services, which may store data in various locations globally. Firebase maintains SOC 2/3 compliance and follows industry-standard security practices.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication
• Password authentication handled securely by Firebase Authentication; we do not store plaintext passwords
• Firestore security rules to protect user data

5.3 Limitations

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained until you delete your account
• User Content: Retained until you delete it or delete your account
• Usage Data: Typically retained for 12-24 months
• Transaction Records: Retained as required by law (typically 7 years)
• YouTube Video Data: Public details of our own tutorial videos, retained only while the video is linked to a block page and deleted when it is unlinked or the page is removed. Where a Google account's authorisation is revoked, any data held under it is deleted within 30 days. See Section 12.4

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we must retain it to comply with legal obligations.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to access your personal information and request a copy of your data in a portable format.

7.2 Correction

You can update and correct your account information at any time through the App settings.

7.3 Deletion

You can delete your account and associated data at any time through the App settings. Some information may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out

You can opt out of:

• Marketing communications (via email preferences)
• Push notifications (via device settings)
• Analytics (via App settings)

7.5 Data Restriction

You can request that we limit how we use your personal information in certain circumstances.

7.6 Objection

You have the right to object to certain processing of your information, such as for marketing purposes.

7.7 Exercising Your Rights

To exercise these rights, please contact us through the App or our website. We will respond to your request within 30 days.

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we learn that we have collected information from a child under 13 without parental consent, we will delete that information as quickly as possible.

Users between 13 and 18 must have parental or guardian consent to use the App.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place, including relying on approved data transfer mechanisms such as:

• Standard Contractual Clauses (SCCs)
• The EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), where applicable
• Adequacy decisions

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request information about:

• Categories of personal information we collect
• Sources of personal information
• Purposes for collecting or selling personal information
• Categories of third parties with whom we share information

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Opt-Out

We do not sell your personal information. If our practices change, we will update this policy and provide you with the right to opt-out.

10.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

11.1 Legal Bases for Processing

We process your personal information based on:

• Contract: To provide the App services you've requested
• Legitimate Interest: To improve and optimize our App
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws

11.2 Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

12. Third-Party Services and Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12.1 Firebase/Google Services

We use Firebase services provided by Google. Firebase's privacy practices are governed by Google's Privacy Policy. Learn more at: firebase.google.com/support/privacy

12.2 Apple Services

The App is distributed through the Apple App Store. Apple's collection and use of information is governed by Apple's Privacy Policy.

12.3 Stripe

Subscription payments made on the web are processed by Stripe. Stripe's collection and use of your payment information is governed by Stripe's Privacy Policy. Learn more at: stripe.com/privacy

12.4 YouTube API Services

Quiltler uses YouTube API Services. We publish quilt block tutorial videos to our own YouTube channel and embed those videos on our public quilt block pages so you can watch a block being sewn alongside the pattern for it.

By using the parts of Quiltler that show YouTube content, you are agreeing to be bound by the YouTube Terms of Service. Google's handling of any information it collects is governed by the Google Privacy Policy (http://www.google.com/policies/privacy).

What we access and store

Only our own channel is connected to Quiltler, and only by us. We do not ask you to connect a YouTube account, and Quiltler has no feature that reads, writes or stores anything from a visitor's YouTube account. The YouTube data we store is limited to public facts about our own videos, saved alongside the block page each video belongs to:

• The video's YouTube ID, title and description
• Its publication date and its running time
• The playlists we added it to

We use this to embed the correct video on the correct page and to describe it to search engines. It is refreshed from YouTube when we update a page, and it is deleted when we unlink the video or remove the page. Nothing in it identifies you.

Watching an embedded video

Our embedded players are loaded from youtube-nocookie.com, YouTube's privacy-enhanced mode, so YouTube does not set tracking cookies on your device simply because a page containing a player has loaded. If you press play, YouTube receives the request and its own terms and privacy policy apply to that playback, exactly as they would on YouTube itself. See Section 13 for how we use cookies generally.

Revoking access

Where a Google account has authorised Quiltler to act on its behalf, that authorisation can be withdrawn at any time from the Google security settings page at security.google.com/settings/security/permissions. Revoking access immediately ends our ability to publish to that channel, and we delete any data stored under that authorisation within 30 days, in line with Section 6. This is in addition to the deletion rights described in Section 7.3. If you have questions or complaints about how we handle YouTube data, contact us using the details in Section 16.

13. Cookies, Local Storage and Tracking Technologies

On the web (quiltler.com and the web app), and to a lesser extent in our mobile apps, we and our providers use cookies, browser local storage, and similar technologies:

• Essential cookies & local storage: To keep you signed in, maintain your session, remember preferences, and cache your designs for performance. The web app cannot function properly without these.
• Analytics: We use Google Analytics to understand how visitors find and use the site and web app (pages viewed, features used, general location, referral source). This helps us improve the product.
• Advertising & marketing pixels: Our marketing pages may load tags from Google Ads, the Meta (Facebook) Pixel, and the Pinterest Tag to measure ad performance and reach people who may be interested in Quiltler. These may set their own cookies.
• Session management: To maintain your logged-in state securely across the web app.
• Creator attribution: A first-party cookie (qtlr_attr, up to 90 days) remembers where you first arrived from so we can credit the creator or campaign that referred you. See Section 2.4 for details.

You can control cookies through your browser settings and opt out of many advertising cookies via your browser or the ad networks' own controls. Blocking essential cookies or local storage may stop the web app from working. On mobile you can limit analytics through your device settings.

14. Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activities tracked. The App does not currently respond to Do Not Track signals.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)
• Displaying an in-app notification

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

17. Data Protection Officer

If you are in the EEA and have concerns about our data processing practices, you may contact our Data Protection Officer through the contact methods listed above.