The short version
Right now, this site does two things with your information. If you give us your email address, we keep it so we can write to you when the beta opens. And we count visits, so we know whether anyone is reading. That’s it.
We have never sold anyone’s personal information and we don’t intend to start. We don’t run advertising on this site, and we don’t hand your email to anyone who does. You can ask us to delete everything we have about you at any time, and we will.
Who we are
Stash Your Yarn is a sole proprietorship owned and run by Julie Wood, as Stasg in southern California. When this policy says “we” or “us,” that’s who it means — one person and a small stash of email addresses. Our mailing address is on the Contact page.
What we collect today
Your email address, if you give it to us. The waitlist form on the home page asks for one thing: an email address. We don’t ask for your name, your location, or anything about your stash. We use it to tell you when beta invitations go out, and for nothing else.
Basic visit statistics. We use Google Analytics to count page views and see roughly where visitors come from. That involves cookies and tells us things like which pages get read, what kind of device you’re on, and your approximate city. We look at it in aggregate. We don’t use it to build a profile of you, and we haven’t connected it to the email list.
Whatever you put in an email to us. If you write to help@stashyouryarn.com, we keep the message so we can answer it and remember the conversation later.
Ordinary server logs. Our host records the usual technical details of a web request — IP address, browser, time, page requested — which is how any website on the internet works. We use those logs for security and troubleshooting.
What we’ll collect once the marketplace opens
When you can actually buy and sell yarn, we’ll need more, because a package can’t find you without an address. We expect that to be:
Your name and account details; your shipping address, and the addresses you ship to; your listings, photographs, and the messages you exchange with other makers; your order history; and enough payment information to pay you or charge you.
We will not hold your card number or bank details. Payments run through Stripe, which collects that information directly and keeps it on their systems, not ours. We see that a payment succeeded and the last four digits — not the card.
We’ll update this page before any of that starts, and we will not quietly reuse the email you gave us for the waitlist in ways this policy doesn’t describe.
Why we collect it
To send you the emails you asked for. To run the marketplace — process orders, generate shipping labels, pay sellers, resolve claims. To answer your questions. To keep the platform safe from fraud and abuse. To understand whether the site is working. And to meet our legal and tax obligations.
If you’re in a place where the law asks us to name a legal basis: we rely on your consent for marketing email, on performing our contract with you for anything to do with an order, on our legitimate interest in a safe and functioning platform for security and basic analytics, and on legal obligation for records we’re required to keep.
What we will never do
We will never sell or rent your personal information. We will never share your email address with advertisers or data brokers. We will never read your messages with other makers except when reviewing a claim or investigating abuse. We won’t email you about things you didn’t sign up for. And we won’t use dark patterns to make leaving difficult — every email we send has a working unsubscribe link, and it takes one click.
Who else touches your data
We keep this list short on purpose, and we’ll keep it current. Today it is:
Microsoft Azure — hosts this website, and stores the waitlist in a database in the United States. Brevo — sends the confirmation code and the welcome note when you join the waitlist. Brevo is based in France, so your email address is handled in the European Union on its way to your inbox. It gets your address and nothing else. Google Analytics — counts visits. Google Fonts — serves the typefaces this page is set in, which means your browser makes a request to Google when the page loads.
When the marketplace opens we expect to add a payment processor (Stripe), shipping carriers and a label provider, and standard fraud-prevention tooling. Each one gets only what it needs to do its job.
We may also disclose information if the law requires it — a valid subpoena, court order, or similar — or to protect someone’s safety. If a legal request covers your data and we’re allowed to tell you, we will.
If Stash Your Yarn is ever sold or merges with another company, your information would move with the business. We’d tell you before that happened, and the new owner would be bound by this policy until you were given notice of a different one.
Cookies
This site sets cookies for Google Analytics. That’s the only category we use today — there are no advertising or retargeting pixels on this site. When the app launches, we’ll also need cookies to keep you signed in, which is the boring kind that makes accounts work.
You can block or clear cookies in your browser settings. If you’d rather Google Analytics never counted you at all, Google publishes a browser add-on at tools.google.com/dlpage/gaoptout. Blocking analytics cookies does not break anything on this site.
We honor the Global Privacy Control signal. If your browser sends one, we treat it as a request to opt out of any sharing of your information for advertising purposes — which, as above, we don’t do anyway.
How long we keep things
Waitlist emails: until you unsubscribe or ask us to delete them, or until we’ve been sending to an address that never opens anything for two years, at which point we clean it out ourselves.
Support email: two years after the conversation ends.
Analytics: fourteen months, which is Google’s shortest standard retention setting.
Order records, once there are any: seven years, because tax law says so.
When you close an account, we delete or anonymize what we can and keep only what we’re legally required to hold.
Your rights
Wherever you live, you can ask us to do the following, and we’ll do it:
Tell you what we have about you. Send you a copy. Correct anything that’s wrong. Delete it. Stop emailing you. And — for the record — opt you out of the sale or sharing of your information, which isn’t something we do.
If you’re in California: the CCPA and CPRA give you those rights explicitly, including the right not to be treated differently for exercising them. We won’t. In the previous twelve months we have not sold or shared personal information as those laws define it.
If you’re in the UK or European Economic Area: you also have the right to object to or restrict certain processing, the right to data portability, and the right to complain to your local data protection authority. Note that our servers are in the United States, so using this site means your information is processed here.
To exercise any of this, write to help@stashyouryarn.com. No form to fill out. We’ll acknowledge within a few days and finish within thirty. We may need to confirm you’re you before handing over or deleting data — usually by replying from the address in question.
Security
The site is served over HTTPS. Access to the email list is limited to the few people who need it. Payment credentials, when there are any, will live with Stripe rather than with us.
We’re a small company and we won’t pretend we’re unbreakable — no one on the internet should. If something happens to your data, we’ll tell you promptly and plainly, and we’ll tell you what we’re doing about it.
Children
Stash Your Yarn is for adults — you must be 18 to use it. We don’t knowingly collect information from anyone under 13. If you believe a child has given us information, write to help@stashyouryarn.com and we’ll delete it.
Changes to this policy
When we change this page, we’ll update the date at the top. If a change is significant — new categories of data, a new use for what we already have — we’ll email the people on our list rather than hope they notice. Nobody reads a policy twice.
Contact
Questions, requests, or concerns about privacy go to help@stashyouryarn.com, or by mail to the address on our Contact page. Formal legal notices go to legal@stashyouryarn.com.
A real person reads that inbox and will write back.