Privacy policy

Who is responsible

The controller for this website within the meaning of the GDPR is Weng Huiming, Room 402, Building 3, No. 6 Zhongshan North Road, Runzhou District, Zhenjiang, Jiangsu, China.

For any privacy question, including access, correction, deletion, or objection, write to whm5294186@gmail.com. Enquiries are answered within 3 working days.

Your images are never uploaded

The image you choose is read by the browser's local file API, converted to a bead pattern by JavaScript and a Web Worker on your device, and drawn back into the page. The site has no image-upload endpoint: the image, its file name, its pixels, and the resulting bead matrix are not sent to us, Google, Cloudflare, or any other third party.

The same applies to every export. The preview image, PDFs, and materials CSV are generated in your browser. A file reaches your device's Downloads folder only when you ask the browser to save it.

The working image and pattern remain only in the tab's memory and disappear when the tab is closed or reloaded. There is no gallery, project history, account, or cloud backup, so we cannot retrieve a lost pattern.

Hosting and server logs

The site is delivered by Cloudflare Pages. Like any web host, Cloudflare processes the technical data required to deliver a page: your IP address, the requested URL, the time of the request, the referring page, and your browser and operating system version. This is necessary to transmit the page to you and to defend against attacks, and rests on Article 6(1)(f) GDPR, our legitimate interest in operating a secure site.

Cloudflare handles this data as our hosting and security provider. We do not copy the delivery logs into our own user database or combine them with an account. Cloudflare retains technical logs only under its operational and security schedules; you can ask us at whm5294186@gmail.com about a specific request.

Cookies and local storage

The pattern tool itself sets no cookie and writes nothing to localStorage, sessionStorage, or IndexedDB. It does not save your image, pattern, settings, or language preference. English and German are selected by the URL.

Google Privacy & messaging may store a consent record and an IAB Transparency and Consent Framework string in a cookie or other browser storage. That record is needed to remember and communicate your choice. Optional Analytics and advertising storage remains denied unless the consent message records the relevant permission.

When Analytics consent is granted, GA4 normally creates the first-party cookies _ga and _ga_<container-id> to distinguish a browser and retain session state. Their Google default expiry is two years, although browser limits or a later withdrawal may shorten it. Advertising may use first- and third-party cookies or similar storage; the live list of vendors, purposes, and durations is shown in the CMP under Manage options before you decide.

Advertising and analytics

Google Privacy & messaging is the Google-certified consent management platform used on this site. It presents the available purposes and advertising vendors and records whether you consent, refuse, or make a more detailed choice. Optional processing rests on your consent under Article 6(1)(a) GDPR. Refusing it does not disable the pattern tool or its downloads.

Google Analytics 4 is configured with measurement ID G-G77X4BFXRS. Its library loads only after Analytics consent. Before that choice, the site sends no GA4 request, event, or cookieless analytics ping. After consent, GA4 receives the page and referrer, approximate location derived from the network connection, browser and device information, and the funnel events landing, upload_start, preview_success, export_click, and download_success. These events never contain an image, file name, pixel data, bead matrix, or exported file.

GA4 event-level data is kept under the property's retention setting for no longer than 14 months; aggregated reports can remain available for longer. The GA cookies have the default durations described above. We do not set a Google User ID and cannot connect Analytics activity to an account on this site.

Google AdSense is configured to fund the site under publisher ID pub-8922189328924810 (client ca-pub-8922189328924810). Its public tag is requested when a page loads so Google can deliver the Privacy & messaging CMP; that request necessarily exposes technical data such as the page URL, IP address, and browser or device information to Google. Optional Analytics and advertising storage starts denied. After your choice, Google may also process the consent record and ad impressions or interactions to deliver, secure, limit, and measure ads. Depending on your choice and the law that applies, ads may be personalised or limited/non-personalised. The CMP shows the current vendors, purposes, storage, and retention information before consent.

Google Ireland Limited provides GA4, AdSense, and Privacy & messaging in the EEA. Processing can involve Google LLC and other listed vendors outside the EEA; the transfer safeguards and current recipients are described in the CMP and Google's privacy policy at policies.google.com/privacy. Your uploaded image and generated pattern are never part of those transfers.

You can change or withdraw your choice at any time through Privacy and cookie settings in the footer. That link reopens the same three-choice message. A withdrawal updates Consent Mode immediately and stops new GA4 events and optional advertising storage; it does not affect processing that was lawful before withdrawal. You can also delete existing Google cookies in your browser.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. You also have the right to lodge a complaint with a supervisory authority in the country where you live or work.

You may withdraw consent at any time without affecting earlier lawful processing. Because the site holds no account data and does not receive your images, a request will usually concern a hosting log or Google identifier. Write to whm5294186@gmail.com with enough information for us to identify the request; where another provider holds the data, we will help route it.

Children

The site is not directed at children and does not ask for a name, account, or image upload. If local law requires a parent or guardian to approve optional analytics or advertising processing, do not select Consent without that approval. The tool remains usable after Do not consent.

Changes to this policy

We update this policy when the site's processing or providers change. The date at the top identifies the current version; material changes are published here before they take effect where advance notice is required.