Privacy Notice

1. Who controls your data

Simply Hooked, LLC is the data controller responsible for personal data processed through Pattern Stash:

2. Information we collect and why

• Account information: your name, email address, login credentials, and account identifiers, used to create and secure your account and provide the service.
• Your library content: uploaded PDFs and images, saved links, titles, designers, notes, favorites, collections, and related file information, used to store, organize, and display your private pattern library.
• Support communications: messages and information you provide when seeking help, used to respond and maintain service quality.
• Usage and technical data: feature interactions, search activity without saving the search words, device and browser information, IP address, timestamps, and diagnostic logs, used for security, fraud prevention, reliability, and product improvement.

We process this information to perform our contract with you, comply with legal obligations, protect our legitimate interests in operating and securing Pattern Stash, and, where required, based on your consent.

3. Payments

Paddle is our Merchant of Record and handles purchases, subscriptions, payment processing, tax compliance, invoicing, and related customer service. Paddle collects and processes payment information under its own privacy notice. We receive purchase and subscription details needed to provide your plan, but we do not receive your full card number.

4. How we share information

We share personal data only as needed with service providers supporting hosting, storage, authentication, security, diagnostics, and customer support; with Paddle for sales and subscription administration; with legal and accounting advisers; during a legitimate business transfer; and with authorities when required by law or necessary to protect rights and safety.

We do not sell your personal data or your pattern library.

5. Retention

We retain account information and library content while your account is active and for a reasonable period afterward when needed for recovery, legal compliance, dispute resolution, security, or enforcement. Technical and usage records are kept only as long as reasonably needed for the purposes above. When information is no longer needed, we delete or anonymize it.

6. Security

We use appropriate technical and organizational safeguards, including access controls, encrypted network connections, private storage, and restricted file links. No online service can guarantee absolute security, so please use a strong, unique password.

7. Cookies and local storage

Pattern Stash uses essential browser storage and similar technologies to keep you signed in, protect your session, remember necessary settings, and operate checkout. These are required for the service to work. We do not currently use advertising cookies. You can clear browser storage through your browser settings, but doing so may sign you out or reset preferences.

8. International transfers

Our providers may process data in countries outside your state or country. Where required, we rely on recognized safeguards such as adequacy decisions or standard contractual clauses.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data; object to certain processing; withdraw consent; and appeal or complain to a privacy regulator. We may verify your identity before completing a request. You may send a written request to our postal address above.

Residents of the UK or EEA may also request data portability, object to processing based on legitimate interests, and complain to their local supervisory authority. We aim to respond within one month where GDPR applies, subject to lawful extensions.

10. Changes to this notice

We may update this notice as Pattern Stash or applicable law changes. We will post the revised notice here and update its effective date.