Privacy Policy

Effective date: 11 August 2026

Tailor Base Patterns operates the website at tailorbasepatterns.com (the “Service”). This policy explains what data we collect, why we collect it, and your rights regarding that data.

1. Data we collect

Account data

When you register, we store your email address and a securely hashed password via Firebase Authentication. We use this solely to identify your account and send essential transactional emails (email verification, password reset).

Measurement data

You may save named sets of garment measurements (e.g. bust, waist, hip circumferences in centimetres). These figures describe abstract clothing dimensions and are not biometric data — they are not used to identify you as a natural person and are not shared with third parties. They are stored in your account solely to let you re-use them for future pattern generations.

Payment data

Payments are processed by Stripe. We never see or store your card number, expiry date, or CVC. We store only the Stripe session ID and the number of credits granted, which we need to fulfil your purchase and prevent duplicate credit grants.

Usage data

We log each pattern generation (garment scope, output formats, credit tier, and timestamp) under your account. This log is used to investigate support requests and detect abuse. We do not use it for advertising or sell it to third parties.

Technical data

Our servers receive your IP address and standard HTTP headers as part of every request. We do not build profiles from this data and it is not retained beyond normal server log rotation.

2. How we use your data

To create and manage your account.
To generate sewing patterns based on your input.
To process payments and grant credits.
To send transactional emails you explicitly requested (verification, password reset).
To show you your own credit purchase and pattern-generation history.
To detect and prevent fraud or abuse.

We do not send marketing emails, and we do not use your data for automated decision-making or profiling.

3. Legal basis (GDPR)

If you are located in the European Economic Area, our legal bases are:

Contract performance — processing your email address and payment records to provide the Service you signed up for.
Legitimate interests — generation logs and technical data for security and abuse prevention, balanced against your privacy interests.
Consent — where you voluntarily save measurement sets; you can delete them at any time.

4. Third-party services

Service	Purpose	Data shared
Google Firebase	Authentication & database	Email address, account data
Google Cloud Storage	Pattern file storage	Generated PDF/SVG files
Stripe	Payment processing	Email address, payment details
Google Ads	Conversion tracking (with consent)	Conversion events (sign-up, purchase, activation); no measurement cookies are set until you consent via the cookie banner

Each provider has its own privacy policy and processes data under data processing agreements where required by law.

5. Data retention

Account and measurement data is retained for as long as your account is active. You can delete your account and all associated data by contacting us at the address below. Generated pattern files are retained for a fixed 30 days regardless of account status — see Section 6.

6. Generated pattern files

Pattern files (PDF, SVG) generated for any signed-in user are uploaded to Google Cloud Storage and accessible via a time-limited signed URL, which you can re-generate at any time from your History page within the retention window below. Files are automatically and permanently deleted 30 days after generation; the record that a generation happened (scope, date, formats) remains in your History for your reference, but the file itself is not recoverable after deletion.

7. Your rights

Depending on your location you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your account and data (“right to be forgotten”).
Restrict or object to certain processing.
Receive your data in a portable format.

To exercise any of these rights, email us at tailorbase.app@gmail.com. We will respond within 30 days.

8. Cookies

Firebase Authentication uses browser storage (IndexedDB / localStorage) to maintain your session; this is essential and always active.

With your consent, we use Google Ads to measure whether visits to our site (such as a sign-up or a credit purchase) resulted from an ad campaign. On your first visit you can Accept or Decline this via the cookie banner. If you decline, no advertising or measurement cookies are set, and none of the app’s functionality is affected. You can change your choice at any time by clearing your browser’s local storage for this site. We do not use these cookies for any other advertising or tracking purpose.

9. Children

The Service is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will reflect any changes. For material changes we will notify you by email if we have your address on file.

11. Contact

For any privacy-related questions or requests:

Tailor Base Patterns
tailorbase.app@gmail.com