Yarnivo
Privacy & Data Protection

Privacy Policy

Effective Date: April 2, 2026Last Updated: October 4, 2026Operator: Hapad Ltd.

Policy Summary: How Yarnivo Handles Your Information

  • No User Accounts Required: You never need to register, create a password, or submit your name, phone number, or email address to use Yarnivo's calculators, guides, or tracking tools.
  • Personal Craft Data Stays on Your Device: Your saved crochet projects, custom notes, hook choices, swatch records, and row counts are stored exclusively in your browser’s local storage (HTML5 localStorage). They are never transmitted to, queried by, or stored on Yarnivo servers.
  • Minimal Technical Server Processing: When your browser loads pages, our edge hosting infrastructure (Cloudflare Workers Static Assets) processes standard technical transmission metadata (such as IP addresses, requested file paths, and browser headers) solely to deliver web assets securely and reliably.
  • Consent-Based Analytics & AdSense Verification: Yarnivo integrates Google Analytics (Measurement ID: G-5SMWR7WJ4C) operated strictly under Basic Consent Mode—analytics scripts and cookies load only after you provide affirmative consent via our consent controls. We also embed a Google AdSense site verification snippet (Publisher ID: ca-pub-6739409593766826) in the shared HTML head for site ownership confirmation. No ad units or commercial display ads are placed inside calculators, project workspaces, loading states, or error pages.
  • Full User Data Portability: You can export every saved project to an open JSON file at any time, or permanently erase your device records in a single click using our built-in storage tool.

1. Identification of the Data Controller

Yarnivo (accessible online at https://yarnivo.com) is operated by Hapad Ltd. ("Yarnivo", "we", "us", or "our"). We believe crafters deserve clear, respectful, and transparent digital tools that do not harvest personal information.

For questions, technical data inquiries, or privacy-related communications regarding this policy, you may reach our designated privacy contact at:

Operating Company: Hapad Ltd.
Support & Privacy Inquiries: support@yarnivo.com

Note: Because Yarnivo operates without user accounts or user logins, we cannot locate, verify, or alter individual craft dossiers stored within your browser's private storage sandbox on your behalf.

2. Information Processed When You Access Yarnivo

To maintain transparency, we strictly distinguish between three categories of information: technical network data processed during page requests, craft planning information kept exclusively on your personal device, and direct inquiries submitted through our contact form.

A. Technical Transmission Data (Server & Edge Requests)

When your device accesses any webpage, stylesheet, script, or image asset on Yarnivo, technical communication data is transmitted over the internet to our hosting provider, Cloudflare Workers Static Assets. This transmission is technically required by fundamental internet protocols (HTTP/HTTPS) and includes:

  • Internet Protocol (IP) Address: Required to route the requested web packets back to your computer or mobile device.
  • HTTP Request Headers: Including your browser user-agent string (identifying browser brand and operating system version), preferred interface language, and referring webpage URL.
  • Resource URI: The specific static file or route requested (e.g. /tools/gauge-calculator or /guides/how-to-measure-crochet-gauge).
  • Timestamp & Response Codes: The exact date and time of the interaction and the resulting HTTP status code (such as 200 for successful delivery or 404 for missing resources).

B. Craft Project Data (Local Browser Storage Only)

When you use our Interactive Row Counter, plan measurements in our calculators, or organize notes in the My Projects Workspace, all user-entered values are stored solely on your physical device using your web browser’s built-in localStorage API. This data includes:

  • Project metadata: project title, project category (blanket, garment, scarf, amigurumi, accessory), and progress status.
  • Craft parameters: hook size in millimeters, target finished width and height, and chosen unit of measurement (cm or inches).
  • Yarn specifications: yarn brand names, colorway titles, dye lot numbers, and skein quantities.
  • Tension measurements: measured stitch gauge and row gauge counts per 10cm or 4 inches.
  • Calculation snapshots: formulas attached directly from calculators (e.g., foundation chain counts, stitch repeat compatibility, or increase/decrease sequences).
  • Interactive tracking state: current completed row counts, target row milestones, pattern repeat lengths, and multi-step undo history.
Fundamental Privacy Architecture: Your craft project data never leaves your device. It is never transmitted across the network to Yarnivo servers, never uploaded to an external database, never reviewed by our staff, and never shared with other visitors or commercial third parties.

C. Contact Form Inquiries & Feedback Submissions

When you choose to communicate with the Yarnivo team via our Contact page or direct email, you voluntarily provide information necessary to resolve your request:

  • Email Address (Required): Used solely to reply to your inquiry. Max 254 characters, validated for standard email syntax.
  • Name (Optional): Used to address you courteously in correspondence.
  • Subject & Message (Required): Used to understand your calculation question, suggestion, bug report, or general inquiry.
  • Optional Bug Report Data: Page URL, calculator inputs, and expected calculation outcomes provided to help reproduce and fix edge cases.
  • Cloudflare Turnstile Verification Token: Generated ephemerally by Cloudflare Turnstile to verify human interaction and protect our communication channels from automated bot spam.

Contact submissions are never stored in browser storage (localStorage) or a central website marketing database. Submissions are transmitted over encrypted TLS connections, verified against spam via Cloudflare Turnstile, and dispatched directly to our verified support mailbox via Cloudflare's native send_email Worker binding.

3. What Remains on Your Device vs. What Is Transmitted

The table below illustrates the exact architectural separation between local device memory, contact transmissions, and network infrastructure:

Data ItemStorage LocationTransmitted to Server?Who Controls It?
Project names, notes & yarn dye lotsBrowser localStorage (Key: yarnivo_projects_v1)Never transmittedYou (stored on your device)
Row counter progress & undo historyBrowser localStorage (Key: yarnivo_quick_counter_v1)Never transmittedYou (stored on your device)
Temporary calculator form inputsBrowser volatile memory (React state)Never transmittedDiscarded when tab closes
Contact submissions (Email, Name, Message)Ephemeral edge buffer → Support inbox (No local storage or central database)Transmitted upon explicit submissionYou & Yarnivo support operator
Turnstile anti-bot verification tokensEphemeral Cloudflare edge challenge tokenTransmitted to verify human submissionCloudflare, Inc.
Device IP address & request headersEphemeral network buffers / Cloudflare edge logsTransmitted per HTTP requestCloudflare edge infrastructure
Font asset requestsBrowser cache (Google Fonts CDN)Transmitted to Google Fonts CDNGoogle LLC (font asset delivery)
Google Analytics cookies (_ga, _ga_*)First-party browser cookies (when consented)Transmitted to Google Analytics only if analytics consent is grantedGoogle LLC (aggregate usage metrics)
Cookie consent preference (yarnivo_cookie_consent_v1)Browser localStorageNever transmittedYou (stored on your device)
AdSense site verification scriptHTML <head> on public pagesTransmitted to Google AdSense CDN for site verificationGoogle LLC (domain verification)

4. Hosting Infrastructure and Third-Party Services

Yarnivo intentionally minimizes external third-party dependencies. The external services genuinely enabled on this website are strictly limited to:

Provider / ServiceOperational PurposeData InvolvedPrivacy Documentation
Cloudflare Workers Static Assets & PagesGlobal content delivery network (CDN), DDoS mitigation, edge caching, and serverless contact endpoint execution.Ephemeral request metadata (client IP address, requested file URL, timestamp, browser user-agent).Cloudflare Privacy Policy
Cloudflare Turnstile (Cloudflare, Inc.)Privacy-preserving bot detection and spam prevention on contact form submissions without intrusive visual puzzles or tracking cookies.Ephemeral browser challenge telemetry and one-time verification response tokens verified via Cloudflare siteverify API.Cloudflare Privacy Policy
Cloudflare Email Service (send_email binding)Native Cloudflare Workers email dispatch transmitting contact inquiries to our verified destination support inbox. Zero third-party email platforms (no Resend, SendGrid, Mailgun, or Postmark) or external API keys are used.Submitted visitor email, sender name, message body, subject, and optional bug report details.Cloudflare Privacy Policy
Destination Mailbox Provider (Site Operator)Receipt and resolution of crafter inquiries delivered to the verified support destination address. Operated under standard corporate email encryption protocols.Delivered inquiry messages and reply correspondence.Operator Direct Inquiry
Google Analytics (Google LLC - G-5SMWR7WJ4C)Aggregated audience measurement and anonymous usage statistics to understand tool utility and optimize craft guides. Operates under Basic Consent Mode—scripts and cookies are blocked by default and load only after explicit user consent.Pseudonymous client ID (_ga cookie), anonymized IP address, page URL, screen resolution, browser user-agent. Project names, craft notes, row numbers, and contact messages are never collected or sent.Google Privacy Policy · GA Opt-Out
Google AdSense (Google LLC - ca-pub-6739409593766826)Domain and publisher account ownership verification. The verification snippet is embedded in the HTML <head> of public pages. No ad units or commercial display ads are placed inside calculators, project workspaces, loading states, or error pages.Standard HTTP request metadata when the verification script is loaded by the browser.Google Ads & Privacy
Google Fonts (Google LLC)Serving font stylesheets and font files (Newsreader serif and Plus Jakarta Sans sans-serif) for readable typography.Client IP address and standard HTTP request headers sent when your browser downloads the font files. Google states font queries are unauthenticated and not combined with other Google profiles.Google Fonts Privacy FAQ

What Is NOT Enabled: Yarnivo does not integrate Meta (Facebook) Pixel, TikTok Pixel, Hotjar, tracking beacons, cross-site identity graphs, or hidden third-party spyware.

5. Purposes and Legal Bases for Processing

Under data protection laws—including the European Union General Data Protection Regulation (EU GDPR) and the UK Data Protection Act 2018 (UK GDPR)—we process information under the following lawful bases:

  • Consent (Art. 6(1)(a) GDPR / UK GDPR): Processing aggregate analytics metrics via Google Analytics (G-5SMWR7WJ4C) only when you affirmatively grant consent in our Cookie & Analytics Preferences banner. You have the right to change or withdraw your consent at any time via the "Cookie & Analytics Preferences" link in the footer.
  • Legitimate Interests (Art. 6(1)(f) GDPR / UK GDPR): Operating Cloudflare’s global edge network to route web traffic, deliver requested HTML and CSS files to your browser, defend against distributed denial-of-service (DDoS) attacks, maintain network integrity, prevent automated spam submissions via Turnstile, verify site ownership via AdSense, and respond to inquiries voluntarily submitted through our contact form.
  • Functional & Contractual Necessity (Art. 6(1)(b) GDPR): Storing calculation parameters, project records, and row counts in your browser’s local storage at your explicit command (e.g., when you click "Save to Project", "Duplicate", or the row counter increment buttons), and responding to technical support or error reports initiated by you.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Processing server records where strictly required by statutory security, tax, or law enforcement mandates.

6. Data Retention and Deletion

We maintain a clean, verifiable separation between temporary network logs, local browser storage, and contact inquiries:

  • Local Browser Storage: Data stored in localStorage remains on your device until you choose to delete it. You can delete individual projects in the My Projects Workspace, use the one-click deletion tool on our Cookie and Browser Storage Policy page, or clear your browser's site data. Please note: Clearing browsing history alone typically preserves local storage; to delete saved projects from your browser controls, you must specifically clear "Cookies and other site data" or "Offline website data" for yarnivo.com.
  • Contact Form Messages & Inquiries: Inquiries delivered to our support mailbox are retained only for the duration required to communicate with you, resolve reported bugs, or comply with statutory administrative and dispute-resolution retention periods. We do not use your contact information for marketing lists or share it with third parties.
  • Server & Edge Logs: Cloudflare edge nodes retain ephemeral technical routing logs in automated buffers for security diagnostics, network integrity, and DDoS mitigation in accordance with Cloudflare's operational retention policies.

7. Your Privacy Rights & How to Exercise Them

Depending on your geographic location, you may be entitled to specific statutory rights regarding personal data under the EU GDPR, UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other global privacy statutes. Because of Yarnivo's privacy-by-design architecture, exercising your rights is straightforward:

  • Right to Access & Data Portability: You have the right to access and obtain a portable copy of your craft data. You can download a complete, open-format JSON backup of every project and calculation at any time by clicking "Export All Backup" in My Projects.
  • Right to Rectification: You can edit any project title, hook size, yarn detail, or note directly in your browser workspace at any time.
  • Right to Erasure ("Right to Be Forgotten"): You have immediate self-service ability to erase all data stored in your browser. Simply click the "Clear All Local Data on This Device" button on our storage management page or clear site data in your browser settings. You may also request deletion of any email communications sent to our support inbox by contacting support@yarnivo.com.
  • Right to Inquire or Object: You may contact Hapad Ltd. at support@yarnivo.com regarding any aspect of our data processing. Because local craft projects are stored exclusively on your device, please note that we cannot directly inspect or modify your private offline records.
  • Right to Lodge a Complaint: If you reside in the EEA or UK, you have the right to submit a complaint to your local supervisory authority (such as the UK Information Commissioner's Office or your national Data Protection Authority).

8. Security Safeguards and Inherent Limitations

We implement proportional technical safeguards to protect information:

  • Mandatory TLS/HTTPS Encryption: All communications between your web browser and Yarnivo are encrypted in transit using modern Transport Layer Security (TLS 1.2 and TLS 1.3).
  • Browser Sandbox Isolation: Craft calculations and project storage execute strictly within the browser's client-side JavaScript sandbox.
  • Absence of Central Databases: Because Yarnivo does not store craft notes, passwords, or personal profiles in a central server database, there is no central database susceptible to credential stuffing, external credential theft, or unauthorized data dumps.
Realistic Security Notice: While we enforce robust security controls, no method of electronic transmission over the public internet or local data storage is 100% impenetrable. You remain responsible for maintaining the physical security, operating system updates, and browser cleanliness of your personal computer, tablet, or phone.

9. Children’s Privacy

Yarnivo is a general audience craft utility designed for crafters, hobbyists, and fiber artists of all ages. We do not knowingly solicit, request, or harvest personal data from children under 13 years of age (or under 16 where required by European national law). All calculators, reference charts, and guides can be explored freely without providing personal details.

If a parent or guardian believes their child has submitted personal details through our contact form or support email, please contact us at support@yarnivo.com, and we will promptly delete any associated communication records.

10. International Data Transfers

Cloudflare operates an Anycast globally distributed edge network with points of presence in over 330 cities across more than 120 countries. When your browser requests Yarnivo assets, the request is handled by the geographically closest edge data center. To the extent that technical routing data crosses international borders, Cloudflare complies with recognized international transfer mechanisms, including standard contractual clauses (SCCs) and regional data transfer frameworks.

11. Google AdSense Site Verification and Advertising Policy

Yarnivo includes Google's site ownership verification script for Google AdSense (publisher ID ca-pub-6739409593766826) in the shared HTML <head> on public content pages:

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6739409593766826" crossorigin="anonymous"></script>

Distinction Between Verification and Active Advertising: This script is included strictly to allow the Google AdSense crawler to verify site and publisher account ownership. Yarnivo does not currently display commercial banner ads, video ads, or sponsored marketing units. We explicitly commit that commercial advertisements will never be placed inside interactive calculators, project workspaces, loading states, or error pages.

Required Consent Platform Setup Before Serving Ads: Under Google’s EU User Consent Policy and regional privacy laws (GDPR, UK GDPR, Swiss FADP), publishers serving ads to visitors in the European Economic Area (EEA), United Kingdom, or Switzerland must implement an IAB Europe Transparency and Consent Framework (TCF v2.2) certified Consent Management Platform (CMP). Because Yarnivo currently only runs ownership verification without serving live ads, a Google-certified CMP will be configured and deployed prior to any future commercial ad rendering.

12. Changes and Policy Revisions

We may update this Privacy Policy from time to time to reflect operational, legal, or architectural enhancements to Yarnivo. Any modifications will be posted directly to this URL with an updated "Last Updated" timestamp. We encourage you to review this page periodically. Continued use of Yarnivo following the posting of revisions signifies your acknowledgement of the updated terms.

13. Contact Information and Inquiries

If you have questions, feedback, or data privacy inquiries regarding Yarnivo or this policy, please reach out to our team: