What stays private—and what we measure.

Who this service is for

Scribble to Stitch is a general-audience service for adults. A purchaser must be at least 18. We do not ask a child to create an account, place an order, or upload information. An adult who uploads a child's artwork confirms they are authorized to do so. Please do not include the child's full name, address, school, or other private information in the artwork or order notes.

The free preview stays in your browser

The free landing-page preview reads the image on your device so you can inspect the framing. The image, its filename, and its contents are not uploaded to Scribble to Stitch or sent to our analytics provider. Refreshing or closing the page clears the preview.

Saving a drawing for checkout

In the order design workspace, choosing and adjusting a photo stays on your device until you agree to our terms and continue to checkout. We then save the prepared image and your layout privately, so you do not need to upload it again after payment. iPhone HEIC conversion, when needed, happens on your device.

An essential, protected cookie lets the same browser resume the saved draft for up to 24 hours. Unpurchased drafts expire after 24 hours and are removed by our cleanup process. Drafts associated with an unresolved payment are held until the payment is reconciled, to avoid deleting a paid order. A short-lived digest of the connecting address is kept for up to two days to limit upload abuse. Neither artwork nor checkout drafts are sent to analytics.

Information used for a paid order

When you place an order, we collect the information needed to complete and support an order: payment and order references, email, delivery details, the source artwork, customer proofs, production artwork, proof decisions, fulfillment status, and support messages. Stripe processes payment credentials; Scribble to Stitch does not receive or store complete card numbers.

We use order information only to take payment, prepare and secure the proof, make and deliver the approved blanket, send necessary order messages, prevent abuse, provide support, handle refunds or remakes, and meet accounting or legal obligations.

Artwork use and AI

The paid order flow clearly asks before uploading source artwork. Human or AI-assisted tools may help with crop, perspective, paper shadows, camera noise, color, or resolution. Artwork is used only for that order and related support. We do not use it to train an AI model, advertise another order, create a public gallery, or sell it. Any separate promotional use would require separate, explicit permission.

The customer-facing proof is stored separately from the exact production artwork it represents. Proof approval records both matching versions; the mockup is never used as the manufacturing file.

Private storage and deletion

Uploaded artwork and proofs are stored in private object storage, not in analytics or a public gallery. Original filenames are not retained. Unnecessary embedded image metadata, including common location and camera metadata, is removed before storage.

Source artwork, customer proofs, and production artwork are automatically deleted 30 days after confirmed delivery, cancellation, or full refund, except while a support issue is open. Secure resume links are single-use and expire after seven days. Essential order-access cookies are short-lived and are not used for advertising.

Limited transaction, tax, refund, security, and audit records may be kept for up to seven years when reasonably needed for accounting, fraud prevention, dispute handling, or legal obligations. Support messages may be kept for up to two years after the issue closes.

Service providers

We share information only as needed with contracted providers that process payments, host and secure the service, store private files, deliver transactional email, prepare the approved product, ship the order, or help us meet legal obligations. Production and shipping partners receive only the approved production file and delivery details needed to make and deliver the blanket.

We may also disclose information when reasonably necessary to obey law, protect customers or the service, investigate fraud, or respond to a valid legal request. We do not sell personal information or share it for cross-context behavioral advertising.

Privacy-first site analytics

We use PostHog Cloud in the United States to understand whether the public site is useful. Analytics are cookieless and use no person profiles, session replay, heatmaps, automatic click recording, or private-order or proof-page tracking. The configuration respects a browser's Do Not Track and Global Privacy Control settings.

For approximate visitor counts without tracking cookies, PostHog briefly uses your network address and browser user-agent together with this site's hostname to create a daily rotating hash. Its cookieless processing removes the raw address and user-agent before storing the event. Counts are approximate, not persistent customer identities.

We measure only:

• Page visits, referrers, and campaign tags such as UTM links.
• Anonymous actions such as opening or completing the artwork preview, broad file-format/size categories, preparation and upload timing ranges, error categories, layout-control use, and opening checkout. The drawing designer sends only these limited action summaries—not its images, filenames, saved-draft IDs, or contents.
• General browser, operating system, device category, and coarse geographic information supplied with ordinary web requests.

We never send artwork, filenames, email addresses, order IDs, payment-page URLs, proof pages, or secure-link tokens to PostHog. Page URLs have query strings and fragments removed; referrers are reduced to their origin. Only limited campaign labels are retained. Completed payments and order progress are verified separately in our private order system, not inferred from analytics clicks. You can read the PostHog privacy notice.

Ordering update emails

If you request an ordering update, we collect the email address you enter to send one availability update. It is stored privately, is never attached to artwork or analytics, and is kept until that update is sent or you ask us to remove it. Every update includes an unsubscribe option.

Your choices

You may ask to access, correct, or delete information associated with your email or order, or unsubscribe from the launch list. We may need to verify the request and may retain records that law or a valid dispute requires us to keep. These choices do not limit any additional privacy rights available where you live.

Security and policy changes

We use access controls, private storage, expiring links, metadata removal, and data minimization to reduce risk. No online system can promise absolute security. If this policy changes materially, we will update the date and provide notice when required.

Contact

Email hello@scribbletostitch.com with a privacy question or request.