Privacy Policy

This Privacy Policy explains how Pixels & Floss("we," "us") collects, uses, and shares information when you use our website and pattern studio (the "Service"). We are operated from Nova Scotia, Canada, and handle personal information in accordance with Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Account information: name, email address, and password (stored hashed). Subscription status and Stripe customer identifiers when you subscribe.

Pattern data: designs you save to the cloud, brand settings, and export preferences associated with your account.

Usage and technical data: browser type, device information, IP address, and logs needed to secure and operate the Service.

Contact form: information you submit via our contact page, including optional attachments.

Local storage: some settings may be stored in your browser (for example, brand preferences) before or without cloud sync.

• Provide, maintain, and improve the Service
• Authenticate you and save your designs
• Process payments and manage subscriptions
• Respond to support requests and contact form messages
• Detect abuse, fraud, and security issues
• Comply with legal obligations

We do not sell your personal information. We share data only with:

• Service providers listed in the next section, who process data on our behalf under contractual safeguards
• Legal requirements when required by law or to protect rights and safety
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice where appropriate

We use the following third-party processors to operate the Service. Each processes data only as needed to provide their service to us:

• Vercel Inc.: web hosting and application delivery (United States)
• Neon Tech, Inc.: PostgreSQL database hosting (United States)
• Stripe, Inc.: payment processing and subscription billing (United States / international)
• Resend, Inc.: transactional email delivery when configured (United States)
• FormSubmit: email delivery fallback for contact and account messages (United States)
• Google LLC: Google Analytics for aggregated usage statistics (United States)

Payment card details are handled by Stripe; we do not store full card numbers. Each processor's use of your data is also governed by its own privacy policy.

We keep account and design data while your account is active. If you delete your account or request deletion, we will remove or anonymize personal data within a reasonable period, except where we must retain records for legal, tax, or security purposes.

We use industry-standard measures to protect data in transit and at rest. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

You may access and update account details from your account page. You may request access, correction, or deletion of personal data by contacting hello@pixelsnfloss.com. We will respond within the timeframes required by applicable law.

Depending on where you live, you may have additional rights under other privacy laws (for example, GDPR or CCPA). Canadian users have rights under PIPEDA as described in the next section.

PIPEDA governs how we collect, use, and disclose personal information about identifiable individuals in the course of commercial activities in Canada. We are accountable for personal information under our control and use contractual and organizational measures to ensure our processors protect it appropriately.

Your PIPEDA rights include the right to access your personal information, request correction of inaccurate information, and withdraw consent where processing is based on consent (subject to legal or contractual restrictions). To exercise these rights, contact us at hello@pixelsnfloss.com.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We use essential cookies and similar technologies for authentication and session management. Google Analytics may set cookies to help us understand aggregated site usage. We do not use third-party advertising cookies on the Service at this time.

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from anyone under 13. If you are under 13, do not create an account or submit personal information through the Service.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, contact us at hello@pixelsnfloss.com and we will delete it promptly. Users between 13 and the age of majority in their province or territory should use the Service only with a parent or guardian's permission where required by local law.

The Service is operated from Canada. If you access the Service from outside Canada, your information may be processed in Canada, the United States, or other countries where our processors operate, as described in the Data processors section. By using the Service, you acknowledge that your information may be transferred to jurisdictions that may have different privacy laws than your own.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use after changes means you accept the updated policy.

Privacy questions or requests: hello@pixelsnfloss.com or our contact form.