MyVibe Pattern Studio — Privacy Policy
Last updated: October 9, 2026
We collect as little data as possible. Your images and patterns never leave your device.
Who is responsible
Pavlina Zizkova, Czech Republic, contact: info@myvibespace.cz or Etsy messages at https://www.etsy.com/shop/myvibepatterns.
What we process and why
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| A one-way fingerprint (hash) of your Etsy order number and its last 4 digits. We do not store the full number. | To confirm your purchase, give you access and find your order when you contact us | Contract, Art. 6(1)(b) | Until 12 months after your last sign-in |
| Sign-in dates and monthly sign-in count | To apply the fair use limit and prevent shared access | Legitimate interest in protecting the license, Art. 6(1)(f) | Until 12 months after your last sign-in |
| A signed sign-in cookie stored in your browser | To keep you signed in | Contract, Art. 6(1)(b) | 90 days, or until you clear your browser data |
| A one-way fingerprint of your IP address combined with the current hour, only after a failed sign-in | Protection against guessing order numbers (max. 10 failed attempts per hour) | Legitimate interest, Art. 6(1)(f) | Deleted within 7 days |
| IP address in our hosting provider's technical logs | Security and operation of the service | Legitimate interest, Art. 6(1)(f) | As set by the hosting provider, typically a few days |
Checking your order with Etsy. Each time you sign in, we use Etsy's official API to check that the order number exists in our shop and includes MyVibe Pattern Studio. We do not store your name, email, address or any payment details.
What we never collect. We never collect your images, your patterns or what you do inside the app. All image processing happens locally in your browser.
Cookies
We use only the sign-in cookie described above, which is strictly necessary for the app to work. We use no analytics, advertising or tracking cookies, so no cookie banner is needed.
Who else handles the data
- Netlify, Inc. (USA), which hosts the app and stores the data above and processes it only on our instructions. Transfers to the USA are covered by the EU–US Data Privacy Framework and the EU Standard Contractual Clauses.
- Etsy, where you made your purchase. Etsy acts as an independent controller under its own privacy policy.
We do not sell or share your data with anyone else, and we do not use it for marketing.
Your rights
You have the right to access, correct or delete your data, to restrict or object to its processing, and to data portability. To use any of these rights, contact us. If your data is deleted, you can sign in again with your order number, and a new record is created.
If access for an order is suspended for misuse (see our License), we keep its record for as long as the suspension lasts.
You can also file a complaint with a data protection authority. In the Czech Republic this is the Office for Personal Data Protection (www.uoou.cz). You may also contact the authority in your own country.
Changes
If this policy changes, we will update the date above. Significant changes will be announced in the app.