Privacy policy
How KnitGrid handles your personal data: what is stored on your device, what is stored if you create an account, which providers we use and what rights you have.
Last updated: 2026-11-13
This policy describes how personal data is processed when you use KnitGrid – the website knitgrid.app and the KnitGrid app. We try to collect as little as possible. You can draw, save and print patterns without creating an account, and your patterns then never leave your own device.
This is an English translation. In the event of any discrepancy, the Swedish version prevails.
Data controller
Swedish Treats AB (Swedish company reg. no. 559506-5359) is the controller for the processing described here.
- Address: Plåtslagarvägen 19, 861 36 Timrå, Sweden
- E-mail: support@knitgrid.app
Contact us at the e-mail address above if you have questions about your personal data or wish to exercise your rights.
Summary
- Without an account, your patterns are stored only in your browser or on your phone. We do not receive them.
- With an account, we store your e-mail address and the patterns you save to the account, so that you can access them from different devices and share them if you wish.
- We use no analytics tools, no advertising and no tracking. We never sell personal data.
- We only use cookies and local storage that are necessary for the service to work. That is why we do not show a cookie banner.
When you use KnitGrid without an account
On the website, your patterns are stored in your browser’s local storage (localStorage) on your computer or phone. Your choice of light or dark theme is also stored there. This data is not sent to us and remains until you delete the patterns or clear your browser data.
In the app, your patterns, favourites, custom colours and settings are stored locally on your phone. The app does not send this data to us. It remains until you delete it or uninstall the app. If you choose to share knitting instructions from the app, they are sent to the recipient or app that you choose.
Technical data when you visit. When you visit the website, the server that delivers the pages receives technical data that all browsers send, such as IP address, time, the page requested and the browser type. This data is needed to display the page and to protect the service against errors and abuse. It is not used to profile you and is kept only for a limited time in server logs.
When you create an account
An account is optional. You only need one if you want to save patterns in the cloud or share them with the community.
We then process:
- E-mail address – so that you can log in, and to send log-in links and confirmations.
- Password – if you choose to log in with a password. The password is stored in encrypted (hashed) form by our provider of the log-in service. We cannot see it.
- Display name – when the account is created, the profile is automatically given a display name consisting of the part of your e-mail address before the @ sign. The display name is visible to others if you share a pattern with the community.
- Patterns you save to the account – name, grid, colours, which template the pattern is based on, whether the pattern is shared, and when it was created and changed.
- Favourites – if you mark a shared pattern as a favourite, this is stored linked to your account. Others only see the total number of favourites, not who has added them.
- Log-in data – technical data needed to keep you logged in, such as the time of your last log-in and a session key.
When you share a pattern with the community
Patterns in your account are private until you yourself tick “Share with the community”. A shared pattern becomes public: anyone can see the pattern, its name and description, your display name and the number of favourites, and other users can start from the pattern and save their own copy. You can stop sharing the pattern or delete it at any time. Copies that others have already saved are not affected.
Do not write personal data about yourself or others in the name or description of a pattern that you share.
If you contact us
If you e-mail us, we process your e-mail address and what you write in order to reply and help you. We keep the e-mail for as long as necessary to handle your request and delete it no later than 12 months after the request has been closed.
Purposes and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Providing an account, saving and syncing your patterns | E-mail, password (hashed), patterns, favourites, log-in data | Contract (Article 6(1)(b) GDPR) – the processing is necessary to provide the service you have requested |
| Showing shared patterns in the community | Patterns you have shared, display name | Contract (Article 6(1)(b) GDPR) |
| Delivering the website, troubleshooting and protecting the service against abuse | IP address and other technical data | Legitimate interest (Article 6(1)(f) GDPR) – keeping the service working and secure |
| Answering support questions | E-mail address and the content of your message | Legitimate interest (Article 6(1)(f) GDPR) – being able to help you |
We do not use your data for marketing, profiling or automated decision-making.
How long we keep the data
- Locally stored patterns and settings exist only on your device and are entirely under your control.
- Account data, patterns and favourites are kept for as long as you keep your account. When you ask us to delete the account, the e-mail address, the profile, all patterns in the account and your favourites are deleted. Copies in our providers’ backups may remain for a limited time before they are overwritten.
- Server logs are kept for a shorter period in accordance with the provider’s practices.
- Support requests are deleted no later than 12 months after the request has been closed.
Providers that process data on our behalf
We use a small number of providers (processors) who may only process the data on our behalf and in accordance with our instructions:
- Supabase – database and log-in service. Accounts, patterns in the cloud and favourites are stored here, and e-mails with log-in links and confirmations are sent from here.
- Hosting provider for the website – delivers the website’s pages and handles server logs.
We do not disclose personal data to anyone else, except where we are required to do so by law, for example following a decision by a public authority.
Transfers to countries outside the EU/EEA
Our providers may process data in, or provide support from, countries outside the EU/EEA, such as the USA. When data is transferred there, we ensure that the transfer is permitted under the General Data Protection Regulation, for example because the recipient is covered by a European Commission adequacy decision (such as the EU–US Data Privacy Framework) or through the European Commission’s standard contractual clauses. Contact us if you would like to know more.
Cookies and local storage
We only use what is necessary for the service to work:
| Name | Type | Purpose | Duration |
|---|---|---|---|
knitgrid.patterns.v1 |
Local storage in the browser | Your patterns when you are not logged in | Until you delete them |
knitgrid-theme |
Local storage in the browser | Your choice of light or dark theme | Until you clear your browser data |
sb-…-auth-token |
Cookie | Keeps you logged in (only set if you log in) | Until you log out or the session expires |
These are necessary functions that you yourself have requested, so under the Swedish Electronic Communications Act (lagen om elektronisk kommunikation) no consent is required. We do not use any cookies for statistics, advertising or tracking, and we do not load such services from third parties. That is why we do not show a cookie banner.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- find out what data we hold about you and receive a copy of it (right of access),
- have inaccurate data corrected,
- have your data erased, for example by deleting your account,
- request that the processing be restricted,
- object to processing based on legitimate interest,
- receive data that you yourself have provided in a machine-readable format (data portability).
You can delete patterns yourself under My patterns. If you wish to exercise any of the other rights, or delete your account, e-mail support@knitgrid.app from the e-mail address linked to the account. We will respond within one month.
Complaints
If you believe that we are processing your personal data incorrectly, we would like you to contact us first. You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY, the Swedish Authority for Privacy Protection), Box 8114, 104 20 Stockholm, Sweden, www.imy.se. If you live in another EU/EEA country, you can also contact the data protection authority in your own country.
Children
KnitGrid is not specifically aimed at children. You must be at least 13 years old to create an account.
Changes to this policy
We update this policy when the service changes, for example if the app gains the ability to log in and sync patterns. The date at the top shows when the policy was last changed. In the event of major changes, we will inform you on the website and, if you have an account, by e-mail.