Privacy Policy

1. Who we are

BeadFringeLab is a web application for designing beaded fringe earring patterns. We are committed to protecting your privacy and handling your data with care.

2. Information we collect

We collect only what is necessary to provide the service:

• Email address and password — collected when you create an account. An account is optional for Free users; it is required to purchase add-ons or a Pro subscription so entitlements can be stored and retrieved across devices. Managed by Clerk.
• Payment information — processed by Stripe. We never see or store your card details. Stripe may store a customer record linked to your email address.
• Earring patterns — Pro subscribers' patterns are saved to our database (Supabase) so they are available across devices. Guest and Add-on users' patterns are stored only in their browser's local storage and are never sent to our servers.
• Entitlements — which add-ons or subscription you have purchased, stored in our database and synced from Stripe.
• Uploaded images — if you use the Inspiration Image feature, your uploaded photo is processed server-side to extract dominant colors and is not stored after processing.
• Usage data — we log anonymized product events (for example: pattern created, export downloaded, feature tapped) along with your account tier, browser name, device type, and screen size. Events are stored in our own database and are never shared with third-party analytics services. No names, email addresses, or pattern content are included in these logs.

3. Cookies and local storage

We use only essential cookies. No tracking, advertising, or analytics cookies are set.

• Session and authentication cookies — set by Clerk to keep you signed in. These are httpOnly and necessary for the service to function.
• Local storage — used to remember your theme preference (light/dark) and, for guest users, to autosave the current pattern in your browser. This data never leaves your device.

Because we use only essential cookies, no cookie consent banner is required.

4. How we use your information

• To authenticate you and maintain your session
• To verify your entitlements on each request
• To save and retrieve your patterns (Pro subscribers)
• To process payments and sync purchase status via Stripe webhooks
• To enforce rate limits (requests are tied to your user ID or IP address)
• To apply or remove watermarks on exported PNG files based on your tier

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-party services

• Clerk — handles authentication. Your email and hashed password are stored by Clerk under their privacy policy.
• Stripe — handles all payment processing. We receive only a confirmation of payment status; card details are never shared with us.
• Supabase — stores Pro users' patterns and entitlement records.
• Vercel — hosts the application. Standard server logs (IP address, request path, timestamp) may be retained for a short period per Vercel's data retention policy.
• Upstash Redis — stores rate-limit counters. Counters are keyed by user ID or IP address and expire automatically after one hour.

6. Data retention

• Account data (email, entitlements) is retained for as long as your account exists.
• Pro patterns are retained until you delete them. Deleted patterns move to Recently Deleted and are permanently purged after 7 days. You may restore or permanently delete them at any time during that period.
• Guest patterns exist only in your browser's local storage and are never sent to us.
• Uploaded inspiration images are discarded after color extraction; they are never stored.
• API rate-limit counters (used to enforce per-hour request limits) expire automatically after one hour. Your saved pattern count is derived from your stored patterns and is not a separate data record.

7. Your rights

You may request deletion of your account and associated data at any time by contacting us at the email address below. We will delete your account, patterns, and entitlement records within 30 days.

8. Children

BeadFringeLab is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance of the updated policy.