Who we are
BeadDot is a free web and iPhone app for designing bead patterns. “We” in this policy means BeadDot. For any privacy question or request: [email protected].
Data we collect
Depending on how you use BeadDot, we process:
- Account details: your email address and the display name you set. Your password is stored hashed by our sign-in provider, Supabase; we cannot see it.
- Sign in with Google: if you sign in with Google, the name, email address and profile photo Google shares with us. We never get your Google password.
- Sign in with Apple: if you sign in with Apple, the name and email address Apple shares with us. We never get your Apple password.
- iPhone app: the app has no usage analytics or session recordings; your account, patterns and inventory sync with our servers. The usage data and session recordings below apply to the website only.
- Guest use: if you use BeadDot without an account, an anonymous id is created for your browser or device; no email is needed.
- Your content: the patterns, tags, follow progress and inventory colors you create.
- Photos: photos you pick in the image-to-pattern tools are processed in your browser and are not uploaded to our servers.
- Usage and technical data: the pages you visit, clicks and features you use; browser, device type, screen size, approximate location (country/city), page performance measurements and error logs. Your IP address is used to estimate location and is not stored.
- Session recordings: to improve the product, your interactions on the page (clicks, scrolling, navigation) may be recorded. What you type into form fields is masked in these recordings.
Why we use it
- To provide the service: saving your patterns, syncing them across devices and letting you sign in (performance of a contract).
- To send account emails such as sign-up confirmation and password reset (performance of a contract).
- To improve the product and find bugs: usage statistics, session recordings and error logs (legitimate interest).
- To keep the service secure and prevent abuse (legitimate interest and legal obligation).
International transfers
Our providers may run servers outside your country (for example in the European Union and the United States), so your data may be transferred abroad with safeguards required by the GDPR and Turkish data protection law (KVKK).
Cookies and browser storage
We use cookies and local storage to keep you signed in, remember your language, hand a pattern over between pages and keep an anonymous visitor id for analytics. You can clear them in your browser settings; if you use BeadDot as a guest, you may then lose access to your patterns.
How long we keep it
We keep your account details and content while your account exists. Session recordings are deleted after 30 days. Usage statistics are kept as long as they are needed to improve the product. If you ask us to delete your account, we delete your account details and content, except what we are legally required to keep. In the iPhone app you can delete your account yourself under Account > Delete account.
Your rights
Under the GDPR and KVKK you can ask whether we process your data, access it, have it corrected or deleted, object to its processing and receive it in a portable format. For any request, including deleting your account, write to [email protected]; we reply within 30 days.
If you are not satisfied with our answer, you can complain to the data protection authority where you live.
Children
BeadDot is not directed at children under 13, and we do not knowingly collect their data.
Changes
We may update this policy. We announce significant changes on the site; the date of the last update is at the top of this page.