Privacy Policy

Purl Wise ("Purl Wise," "we," "us," or "our") operates the website at https://www.purl-wise.com (the "Site"). This Privacy Policy explains what information we collect, why we collect it, who we share it with, and what choices you have.

If you do not agree with this policy, please do not use the Site.

Contact: purlwises@gmail.com
Operator: Purl Wise, located in California, United States.

1. Information We Collect

1.1 Information you give us directly

• Email address — when you sign in with a magic link, create an account, or contact us.
• Google account information — if you choose to sign in with Google, Google shares your name, email address, profile picture, and Google account identifier with us. We do not receive your Google password, and we do not access your Gmail, Drive, Contacts, Calendar, or any other Google service.
• Saved content — patterns you favorite, yarns you add to your stash, notes, project lists, and similar information you choose to save on the Site.
• Correspondence — messages you send us by email.

We do not store passwords. Purl Wise uses passwordless sign-in: either a one-time magic link sent to your email address, or Google Sign-In. There is no password for us to lose.

1.2 What we do not collect from Ravelry

The Site displays pattern, designer, and yarn information retrieved from the Ravelry API. We do not connect to your Ravelry account. You do not need a Ravelry account to use Purl Wise, we never ask for your Ravelry credentials, and we do not read your Ravelry favorites, stash, queue, library, or projects.

Requests to the Ravelry API are made by our servers using our own developer credentials. Your personal information is not sent to Ravelry as part of those requests.

Purl Wise is an independent project. It is not affiliated with, endorsed by, or sponsored by Ravelry, LLC.

1.3 Information collected automatically

When you visit the Site, we and our analytics providers automatically collect:

• IP address (which may be truncated or anonymized)
• Browser type, device type, operating system, and screen size
• Pages viewed, time on page, links clicked, and referring URL
• Approximate location derived from IP address, typically city or region level
• Date and time of your visit

We use Vercel Analytics for this. See Section 4.

1.4 Information we do not collect

We do not collect payment card information, government identifiers, precise GPS location, or sensitive categories of personal information such as health, biometric, racial or ethnic origin, religious beliefs, or sexual orientation.

2. How We Use Information

We use the information described above to:

• Provide the Site's core features, including pattern search, designer profiles, and yarn substitution suggestions
• Sign you in and keep your session active
• Save your favorites, stash, and preferences between visits
• Respond to your questions and support requests
• Understand how the Site is used, diagnose problems, and improve features
• Detect, prevent, and investigate abuse, fraud, and security incidents
• Send you service messages about your account, such as sign-in links
• Comply with legal obligations

We currently send only transactional email — sign-in links and account or service notices. We do not send marketing or promotional email. If that changes, we will update this policy and give you a way to opt out.

We do not use your information to make automated decisions that produce legal or similarly significant effects.

3. Legal Bases for Processing (EEA and UK visitors)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these bases:

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing that already took place.

4. Cookies, Analytics, and Similar Technologies

We use the following categories:

Strictly necessary. Session cookies and local storage that keep you signed in. The Site will not work properly without these.

Analytics. Vercel Analytics measures traffic and usage patterns in aggregate. It does not use cookies and does not track you across other sites; visits are counted using an anonymized identifier that is discarded within 24 hours. Vercel Analytics is provided by Vercel Inc.; you can read Vercel's practices at https://vercel.com/legal/privacy-policy.

Affiliate attribution. Some outbound links to yarn shops and retailers may be affiliate links. When you click one, the retailer or its affiliate network may set a cookie to attribute a later purchase to us. We do not receive your payment details, and we do not control those cookies. See Section 6.

Preferences. Local storage used to remember settings such as craft type, yarn weight filters, or display preferences.

You can block or delete cookies through your browser settings. Doing so may break sign-in and saved content.

Do Not Track and Global Privacy Control. Browsers vary in how they signal tracking preferences and there is no common standard, so the Site does not currently detect or respond to Do Not Track or Global Privacy Control signals. You can still block analytics scripts in your browser, and you can contact us at purlwises@gmail.com to request that we stop analytics processing associated with you.

5. How We Share Information

We do not sell your personal information for money. We share it only as follows:

• Hosting and infrastructure — Vercel Inc., which hosts the Site and processes server logs.
• Authentication and email delivery — Supabase, Inc. (authentication) and Resend, Inc. (email delivery), which process your email address to sign you in and deliver magic links and service messages.
• Google — Google LLC, for Google Sign-In (if you use it).
• Analytics — Vercel Inc.
• Affiliate networks and retailers — when you click an affiliate link, standard referral information such as the referring page may be passed to the retailer.
• Legal and safety — where we reasonably believe disclosure is required by law, subpoena, or court order, or is necessary to protect our rights, your safety, or the safety of others.
• Business transfer — if Purl Wise is acquired, merged, or transferred, your information may transfer with it. We will post notice on the Site before your information becomes subject to a materially different policy.

We do not share your personal information with Ravelry, LLC.

Note on analytics and advertising. Under California law, some analytics and advertising cookies can qualify as "sharing" personal information for cross-context behavioral advertising even though no money changes hands. To the extent analytics identifiers or affiliate cookies do so, you may opt out using the contact method in Section 8 or by disabling non-essential cookies.

6. Affiliate Links

The Site contains, or may in the future contain, affiliate links to yarn shops and materials retailers. If you click an affiliate link and make a purchase, we may earn a commission at no additional cost to you. Affiliate relationships do not influence which patterns or yarn substitutions the Site surfaces. Affiliate links are disclosed on the pages where they appear.

7. Data Retention

• Account and saved content — kept while your account is active, and deleted within 30 days of your deletion request.
• Email address — kept while your account is active; a minimal suppression record may be retained after deletion to prevent re-creation abuse.
• Analytics data — collected and retained in aggregate form by our analytics provider, Vercel Inc.
• Server logs — retained by our host for a short period for security and debugging.

We may retain limited records longer where necessary to resolve disputes, prevent abuse, or comply with law.

8. Your Rights and Choices

Everyone

You can delete your account and its saved content at any time, revoke Purl Wise's access from your Google account settings if you signed in with Google, and clear cookies in your browser.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect and how we use and disclose it; to request deletion; to request correction; to opt out of sale or sharing for cross-context behavioral advertising; and not to receive discriminatory treatment for exercising these rights. In the past 12 months we have collected the categories described in Section 1 and disclosed them to the recipients in Section 5 for the business purposes in Section 2. We have not sold personal information for monetary consideration.

EEA and UK residents (GDPR)

You have the right to access, correct, delete, restrict, or object to processing; to data portability; to withdraw consent; and to lodge a complaint with your local supervisory authority.

How to exercise your rights

Email purlwises@gmail.com with your request. We may ask you to verify your identity, typically by confirming control of the email address on your account. We will respond within the timeframes required by applicable law — generally 45 days under California law and 30 days under the GDPR. You may use an authorized agent where the law allows.

9. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you are in the EEA or UK, you must be at least 16, or have the consent of a parent or guardian. If you believe a child has provided us personal information, contact us at purlwises@gmail.com and we will delete it.

10. International Transfers

The Site is operated from the United States and hosted on infrastructure located in the United States and other countries. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

11. Security

We use commercially reasonable safeguards, including HTTPS encryption in transit and passwordless authentication. Because we do not store passwords, there is no password database to breach; magic links are single-use and expire shortly after they are sent. Our Ravelry API credentials are held server-side and are never exposed to your browser.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep access to your email account secure, since anyone with access to it can request a sign-in link.

12. Third-Party Sites

The Site links to Ravelry, designer pages, yarn retailers, and other external sites. We are not responsible for their content or privacy practices. Review their policies before providing information to them.

13. Changes to This Policy

We may update this policy from time to time. We will change the "Last updated" date above, and for material changes we will post a notice on the Site or email you. Continued use of the Site after changes take effect means you accept the updated policy.

14. Contact Us

Questions, requests, or complaints: purlwises@gmail.com

Read the Terms of Use →