Privacy Policy
Last Updated: 20 August 2026
1. Who we are
Beadpilot is operated by Kate ("we," "our," "us"), the data controller for the personal data described here. Contact: maker@beadpilot.com. We have not appointed a Data Protection Officer (not required at our scale). A postal contact address will be added before Beadpilot launches a paid service.
2. Scope, and one thing worth knowing up front
This policy covers the Beadpilot website, the founding-member sign-up, and our beading-habits survey.
The Beadpilot app itself does not send your patterns anywhere. When you use the app to follow a pattern, that pattern and your progress stay in your own browser (local storage on your device). We do not receive, store, or see your patterns through the app.
3. What we collect
Founding-member sign-up. When you commit as a founding member, you enter your details on a Stripe payment page. We receive from Stripe and store:
- your name and email address;
- the founding price you were shown;
- Stripe reference IDs (customer, setup, and payment-method identifiers);
- a record of your consent and the date/time.
Your card is not charged, and we never see or store your card number — Stripe holds your payment details.
Beading-habits survey. Our Google Form survey is anonymous — we do not ask for your name or email. If you choose to email a pattern to maker@beadpilot.com, we receive your email address and the file you send.
Technical data. We keep our infrastructure secure through Cloudflare, which processes your IP address to block bots and abuse. We do not use analytics or advertising trackers.
4. Cookies
We use only essential and functional cookies: a security check (Cloudflare Turnstile) and a small cookie that remembers which founding price you were shown, so we can honour it. We set no analytics, advertising, or cross-site tracking cookies.
5. Why we use your data (legal basis)
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Add you to the founding-member list; send your confirmation and launch updates | Consent (Art. 6(1)(a)) — withdrawable any time |
| Honour, at launch, the founding price you were shown | Consent / pre-contract steps at your request |
| Keep the site secure and prevent abuse | Legitimate interest (Art. 6(1)(f)) |
| Understand beading habits and which pattern formats to support (survey) | Consent (survey is voluntary and anonymous) |
| Keep records the law requires (only once we take payment, at launch) | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time by emailing maker@beadpilot.com; this does not affect processing already carried out.
6. Who else processes your data (sub-processors)
We do not sell your personal data. We share it only with the providers needed to run the sign-up, and only as much as needed:
| Provider | Purpose | Data shared |
|---|---|---|
| Cloudflare | Website hosting, our database (D1), bot protection (Turnstile) | Sign-up data at rest; IP address for security |
| Stripe | Capturing your payment method (no charge). At launch, Stripe (via Link) acts as merchant of record for the actual subscription. | Name, email, payment details |
| Sending your confirmation email (Apps Script / Gmail from maker@beadpilot.com); running the survey and receiving emailed patterns (Google Forms / Drive) | Email, name; survey answers; any pattern you send |
Each provider has its own privacy policy and processes data under a data-processing agreement.
7. Where your data is stored (international transfers)
Your data is stored and processed in the United States (our Cloudflare database region, and our providers' infrastructure). If you are in the UK/EEA, these transfers rely on appropriate safeguards such as Standard Contractual Clauses and our providers' approved transfer frameworks. You may request details at maker@beadpilot.com.
8. How long we keep it (retention)
| Data | Retention |
|---|---|
| Founding-member list (name, email, consent, Stripe IDs) | Up to 3 years, or until you ask us to delete it, or sooner if Beadpilot has not launched — whichever comes first |
| Patterns you email us | Only as long as needed to assess pattern formats, then deleted |
| Survey answers | Anonymous, so not tied to you; kept in aggregate |
| Payment/tax records (only once we charge, at launch) | As required by law (typically 7 years) |
After the retention period we securely delete or anonymise the data.
9. Your rights
Under GDPR (UK/EEA) you have the right to access, correct, delete (erasure), restrict, port, and object to processing, and to withdraw consent and lodge a complaint. To exercise any right, email maker@beadpilot.com. We respond within 30 days. On an erasure request we delete your record, remove your Stripe customer and saved payment method, and delete related emails or files.
California residents (CCPA/CPRA): you have the right to know, delete, opt out of sale (we do not sell personal data), and non-discrimination. Use the same contact address.
10. Children
Beadpilot is not directed at children under 16, and we do not knowingly collect their data.
11. Security
Data is encrypted in transit (TLS). Sign-up data is stored in Cloudflare's database; card details never reach our servers (Stripe holds them). No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
12. Changes
We may update this policy. We will change the "Last Updated" date and, for material changes, email founding members.
13. Contact
Questions or requests: maker@beadpilot.com.