Privacy Policy

This Privacy Policy describes how RockWorks LLC ("we," "us," or "our") collects, uses, and shares information in connection with Threadstone (the "Service"), including our mobile applications, websites, and related features. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide to us.

When you create an account or use the Service, we collect your email address (for sign-in) and, optionally, a display name or username, profile photo or avatar, ZIP code, and any bio or profile details you choose to add. As you use the Service, we collect content you submit, including store visits, reviews and ratings, photos, saved stores and wishlist items, store recommendations, follows, and any other content you contribute.

Information collected automatically.

When you access the Service, we automatically collect certain device and usage information, including device type, operating system and version, app version, browser type, IP address, approximate location derived from IP, language and region settings, time zone, crash logs, performance data, and information about how you interact with the Service (pages or screens viewed, features used, session timing).

Location information.

Threadstone does not ask for or use your device's location (GPS) permission. To show shops near you, we estimate your approximate location (about city level) from your IP address, using a third-party IP location service. This estimate is used only to show nearby shops and distances while you browse; it is not saved to your account. You can always search by city, state, or ZIP code instead.

ZIP code geocoding.

If you enter a ZIP code in your profile or in search, we may convert it to approximate latitude and longitude using a third-party geocoding service (Google) to enable nearby-stitcher and nearby-store features.

Information we do not collect.

We do not collect government-issued identification numbers or payment card numbers. Any payments processed through the App Store or other payment processors are handled by those providers under their respective privacy policies; we receive only limited transaction information necessary to provide the Service.

2. How We Use Your Information

We use the information we collect to:

• operate, maintain, secure, and improve the Service;
• create and manage your account and authenticate your sign-in;
• display the content you submit (reviews, store visits, recommendations, photos) to other users where you have chosen to make it visible;
• calculate distances and show nearby stores and fellow stitchers;
• send transactional communications about your account, submissions, and the Service;
• send updates or promotional communications where you have consented (you can opt out at any time);
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use;
• generate de-identified or aggregated analytics that do not identify you personally;
• comply with applicable laws, regulations, legal process, and enforceable governmental requests.

Legal bases (EU, UK, and similar laws). Where required, our legal bases for processing personal information are: performance of our agreement with you (to provide the Service); your consent (for optional features such as marketing emails); our legitimate interests in operating, securing, and improving the Service; and compliance with legal obligations.

3. How We Share Information

We do not sell your personal information, and we do not share your personal information with third parties for their own advertising or marketing purposes.

We share information in the following limited circumstances:

Service providers.

We share information with vendors who help us operate the Service, including backend and hosting infrastructure (Base44), authentication and storage providers, analytics and crash- reporting providers, email delivery providers, and geocoding and mapping providers (OpenStreetMap / Nominatim). These providers are contractually limited to using your information to provide services to us.

Other users.

Profile information you choose to make public (such as display name, avatar, ZIP code if you have not hidden it, and your reviews, visits, photos, and recommendations) is visible to other users of the Service. You can hide profile details in your account settings.

Legal and safety.

We may disclose information when we reasonably believe disclosure is required by law, subpoena, court order, or other legal process; to respond to claims or legal liability; to enforce our Terms of Use; to protect the rights, property, or safety of RockWorks LLC, our users, or others; or to investigate fraud or security issues.

Business transfers and corporate changes.

If RockWorks LLC or the Threadstone business is involved in a merger, acquisition, financing, reorganization, restructuring, asset sale, bankruptcy, or transfer of the Service to a different legal entity (including transfer to another entity owned or controlled by the same person or persons), your information may be transferred or disclosed as part of that transaction or as a business asset. We will post notice of any change in ownership or control of the Service on this page.

With your consent.

We may share information in other ways with your consent or at your direction.

4. Cookies, Tracking, and Analytics

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, and improve performance and reliability. You can control cookies through your browser or device settings; disabling them may affect functionality of the Service.

We honor Global Privacy Control (GPC) signals where required by law as a request to opt out of any sale or sharing of personal information. We do not currently respond to other "Do Not Track" browser signals because there is no common industry standard for how they should be interpreted.

5. Data Retention and Account Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service.

How to delete your account.

You can delete your Threadstone account yourself, at any time, in the Threadstone app or on the web. You do not need the app installed. Sign in at threadstone.io in any web browser (or open the app), go to your Profile page, tap Delete account, and confirm. Deletion is processed immediately and cannot be undone. If you cannot sign in, email [email protected] from the email address on your account and we will delete it for you.

What is deleted.

When you delete your account, we permanently delete: your username, name, and bio; your ZIP code and the map location we worked out from it; your favorites and wishlist; who you follow and who follows you; your list of blocked stitchers; your home shop selection; your stitch club memberships; and any shop recommendations, shop edit suggestions, or store ownership claims you have not yet had approved. If you were the verified owner of a shop, that shop's listing returns to unverified. We also remove your profile photo and any profile photos you added (such as a WIP, dream canvas, or favorite finish) from your account, so they no longer appear anywhere on Threadstone.

What stays on Threadstone.

Reviews, comments, visit logs, and photos you shared with the community stay on Threadstone so that shop pages remain useful to other stitchers. Your name is removed from them and replaced with "Former member." Shop listings you recommended remain in the directory. We also keep your email address on a closed account record, which is never shown to anyone; it lets us honor your deletion and, if you sign in again later with the same email address, reopens your account so you can choose a new username. To have your email address and shared content removed as well, email [email protected].

After deletion, we may retain limited information as required for legal compliance, tax and accounting purposes, fraud prevention, dispute resolution, or to enforce our agreements. Backup copies are purged on our normal backup rotation, typically within thirty (30) days.

6. Security

We take reasonable administrative, technical, and physical measures designed to protect your information from unauthorized access, use, alteration, or disclosure, including encryption in transit and restricted access to production systems. No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for all activity that occurs under your account.

7. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the European Economic Area and the United Kingdom), and we do not knowingly collect personal information from such children. If you believe we may have collected personal information from a child under the applicable age, please contact us at the email below and we will delete it promptly.

8. Your Privacy Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; restrict or object to certain processing; receive a copy of your information in a portable format; and withdraw consent where processing is based on consent. We will not discriminate against you for exercising these rights.

California residents.

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California residents have the right to know what personal information we collect and how we use it, the right to delete personal information, the right to correct inaccurate information, the right to opt out of any sale or sharing of personal information for cross-context behavioral advertising (we do not sell or share personal information for these purposes), the right to limit the use of sensitive personal information, and the right to designate an authorized agent to make requests on your behalf.

Residents of other U.S. states.

Residents of Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana, and other states with comprehensive privacy laws have similar rights under those laws, including rights of access, correction, deletion, portability, and opt-out of targeted advertising and sale of personal information.

EU, UK, and Swiss residents.

Residents of the European Economic Area, United Kingdom, and Switzerland have rights under the GDPR, UK GDPR, and Swiss FADP, including the right to lodge a complaint with a supervisory authority in your country of residence.

You can update your profile at any time from your Profile page, and you can delete your account using the Delete account option on your Profile page, in the app or at threadstone.io (see Section 5 for exactly what is deleted and what stays). For any other data requests, including removing content that stays after deletion, contact us at [email protected]. We may need to verify your identity before processing certain requests, and we may decline requests in the limited circumstances permitted by law.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and processing.

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or content that we do not own or control. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service before providing them with your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last updated" date and, for significant changes, by other reasonable means such as in-app notice or email. Your continued use of the Service after the effective date of an updated policy constitutes acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, contact us at:

RockWorks LLC
Email: [email protected]