Privacy policy
Last updated: 10/24/2026
NeonNeedleNook ("we", "us") sells digital cross-stitch patterns at neonneedlenook.com. This policy explains what personal information we collect, why, and what you can do about it. We collect only what we need to sell you patterns and get them to you, and we never sell your information.
What we collect
- Your email address, when you check out, sign in, join our newsletter, or ask to be told when a pattern is ready. We use it to send your download links, sign-in codes, order and refund notices, and (only if you signed up) news about new patterns.
- Your orders: what you bought, what you paid, and when. We keep this so you can download your patterns again later and so we have accurate records for taxes and accounting.
- Payment details are entered on Stripe's secure checkout page and handled by Stripe. We never see or store your full card number. Stripe shares limited details with us, such as the payment status, and depending on the payment method, your name, billing country or postal code, and the last four digits of your card.
- Technical information: when you sign in or download a file, we record the IP address and browser type. We use it to keep accounts secure, to stop download links from being shared, and to fix problems. Our servers also keep standard access logs.
We don't use advertising trackers or third-party analytics, and we don't collect information from children. Our patterns are for adults, and we don't knowingly collect information from anyone under 13.
Cookies
We use only the cookies the shop needs to work:
- a cart cookie that remembers what's in your cart (up to 30 days)
- a sign-in cookie that keeps you signed in after you enter a code (it ends when your session expires or you sign out)
We don't use cookies for advertising or tracking you across other websites.
Who we share it with
We share information only with the service providers that run the shop for us, and only what they need:
- Stripe processes payments. See Stripe's privacy policy.
- Amazon Web Services (AWS) hosts our website, stores our files and data, and sends our emails, in the United States.
We may also share information if the law requires it, to protect against fraud, or as part of selling or transferring the business, in which case this policy would continue to apply to your information.
How long we keep it
We keep order records for as long as you might want to re-download your patterns, and as long as tax and accounting rules require. Newsletter emails are kept until you unsubscribe. Sign-in codes expire within minutes. Backups are kept for up to 30 days before they're deleted.
Your choices and rights
- Newsletter: unsubscribe any time with the link in any newsletter email, or by emailing us.
- Access, correction or deletion: email us and we'll tell you what we have about you, fix it, or delete it. We may need to keep order records the law requires, but we'll delete everything else.
- Depending on where you live (for example, California or the EU/UK), you may have additional rights over your information. Email us to use them; we won't treat you differently for doing so.
Security
Our site uses HTTPS, download links expire after a few minutes, sign-ins use one-time codes instead of passwords, and access to our systems is limited. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we'll update the date at the top of this page. Significant changes will be posted on the site.
Contact
Questions or requests about your information: info@neonneedlenook.com.