Yarn Diary

Privacy

What is stored, and where

Everything you put into Yarn Diary — projects, parts, rounds, notes, photos, tracked time and your settings — is written to your browser's own storage on the device you are using. It is never transmitted to any server operated by Yarn Diary: the app is a set of static files, and the one small service we do run (a sign-in helper for Drive sync, described below) never receives your data and stores nothing.

This has a consequence worth knowing: data held in browser storage belongs to that browser on that device. Clearing site data, uninstalling the browser, or in rare cases the browser reclaiming space under storage pressure will remove it. Export a backup from the Data screen if something matters to you.

Things that happen entirely on your device

• Reading a pattern from a photo or PDF. Text recognition and PDF parsing run inside the browser tab. Your patterns are never uploaded for processing.
• Photos. Resizing and thumbnails are done locally, and images stay in local storage unless you turn on sync.
• Fonts. Served from this site, not from a font CDN.

Analytics

Yarn Diary uses Google Analytics to count visits and see which screens get used — the aggregate numbers that answer "does the scanner get opened?", nothing more. It contains no advertising, no ad tracking and no tracking pixels, and your projects, patterns and photos are never part of what analytics sees: project identifiers are stripped from page addresses before they are reported.

How it is switched on and off:

• In the EU/EEA, the UK and similar opt-in regions (judged from your device's timezone), analytics is off until you allow it — the banner asks once, and ignoring it means no.
• Elsewhere, it is on by default and the banner offers a one-tap opt out.
• If your browser sends a privacy signal (Global Privacy Control or Do Not Track), analytics stays off without asking, unless you explicitly turn it on here.
• Your choice is stored in this browser only, and you can change it any time below.

When analytics is allowed, Google Analytics sets its _ga cookies and processes the data under the Google Privacy Policy. When it is off, Yarn Diary sets no cookies at all. The only other third-party script it can load is Google's sign-in code — and only on a device where you have switched on Google Drive sync: when you connect, and again only if sync ever needs a full sign-in. On a device that has never connected sync, it is never loaded.

Hosting

The site is hosted on GitHub Pages. Like any web host, GitHub receives the network requests needed to serve pages and may log technical information such as IP address and browser type. That processing is GitHub's and is covered by the GitHub Privacy Statement. Yarn Diary has no access to those logs.

Google Drive sync (optional, off by default)

Sync exists so the same projects can appear on your phone and your computer. It is off until you connect an account on the Data screen, and you can disconnect at any time.

When it is on:

• Yarn Diary creates a folder named Yarn Diary in your Google Drive and keeps your projects and photos there. The files are yours, in your account.
• Your projects and photos still do not pass through any server of ours. Your browser talks to Google Drive directly.
• Sign-in is helped by one small Yarn Diary service. A page in a browser cannot hold the credential Google requires for a sign-in that renews itself, so this service holds it and does the exchange: it turns your one-time sign-in into tokens and later trades the renewal token for fresh ones. It stores nothing, logs no tokens, and never sees your projects or photos — the tokens pass through it, and that is all it does.
• The permission requested is drive.file, the narrowest Drive scope available. It grants access only to files this app itself created. The rest of your Drive — every other document, photo and folder — stays invisible to it.
• Signing in loads Google's sign-in script from accounts.google.com. That request only ever happens on a device where sync is switched on — to connect, and later to renew the sign-in — never before you use sync.
• Two sign-in tokens are stored in this browser so that sync can carry on by itself after you reload the page: a short-lived access token that expires within about an hour, and a renewal token used to quietly obtain the next one — without them, Google would have to be asked again every single time, and asking opens a sign-in window. Both only ever reach files this app created, and both are deleted and revoked the moment you disconnect.
• Google's handling of your account and Drive is governed by the Google Privacy Policy.

Limited use

Yarn Diary's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In plain terms: the data is used only to provide the sync feature you asked for. It is never sold, never transferred to anyone else, never used for advertising, and never read by a human.

Deleting your data

• On a device: use Delete everything on the Data screen, or clear site data in your browser settings.
• In Drive: disconnect on the Data screen, then delete the Yarn Diary folder from Google Drive. You can also revoke the app's access entirely at your Google account permissions page.

Because we keep no copy of your data, there is none for anyone to delete on your behalf, and no request you need to send to have it removed.

Children

Yarn Diary is a general-purpose hobby tool and is not directed at children. It collects no personal information from anyone, of any age.

Changes

If this policy changes, the date at the top changes with it. Material changes to how data is handled will be described here rather than quietly amended.

Contact

Questions about privacy are welcome at support.yarndiary@gmail.com.