Privacy notice
Privacy policy
Version 1.0 — in force from 2026-09-01
This page says which data we collect when you use Tricotta, why, and what you can do about it. It is written in plain language on purpose. If something is not clear, write to privacy@tricotta.com.
Who we are
The data controller is the operator of Tricotta. For anything about your personal data write to privacy@tricotta.com.
What we collect when you browse
Anonymous traffic data. If analytics is enabled we measure visits with Plausible, a tool that runs on our own server, sets no cookie and collects no personal data: which pages are read, from which country, on which browser. We cannot identify you from it.
Technical logs. When the site throws an error we keep it in our logs to fix it. Logs live 90 days and are not used to identify you.
What we collect when you use the editor without an account
Nothing that leaves your browser as personal data. The measurements and swatches you type stay in your browser's local storage; the engine receives numbers and returns a chart. We do not store them on our side until you sign in and save.
What we collect when you join the waiting list
Your email address, what you knit with, the machine if you name it, and whether you would join as a founding member. We use them for three things only: to write to you when your place is ready, to send you news about Tricotta now and then, and to decide what to build first. We keep them until you leave the list — every email carries the link, and leaving deletes the row — or until you are invited and sign in, when your email becomes your account.
When you join we send one email to confirm the address. Until you click it your place does not count and we write nothing else; if you never click it, the row is deleted after 30 days.
What we collect when you sign in
Your email address. It is your identity on Tricotta. There is no password: to sign in we email you a 6-digit code that expires in ten minutes. We store the code hashed and never send you anything else without asking.
Your profiles. Body measurements (chest, waist, wrist…) with the source of each value, and the swatches you measured. These are the data the engine needs to shape a garment for you or for the person you knit for. They are personal data and we treat them as such: they are visible only to you and are never used for anything but your garments.
Your workshop and your garments. The machines and needles you own, the projects you save (garment, choices, measurements, ease, swatch), with their versions. A project is your intent, never the geometry: it can always be exported as a small readable file.
Name, language, units. Optional, chosen by you, used only to address you and to show centimetres or inches.
What we never do
- We do not sell your data.
- We do not profile you for advertising; there is no advertising.
- We do not share your measurements, profiles or garments with anyone.
- We do not use tracking cookies, so there is no cookie banner.
- We do not knowingly collect data of children under 16.
- We do not train models on your projects.
Why we process data, and on which legal basis
| Processing | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Serving the site, sessions, sign-in code | Making Tricotta work for you | 6.1.b — performance of a contract |
| Profiles, workshop, saved garments | Shaping and keeping your garments | 6.1.b — performance of a contract |
| Anonymous analytics | Knowing which pages are useful | 6.1.f — legitimate interest, no cookie, no profiling |
| Technical logs | Keeping the service safe and working | 6.1.f — legitimate interest |
| Invoices and accounting (when paid plans open) | Legal obligation | 6.1.c — legal obligation |
Who else sees the data
Your data live on our server in the European Union (Netcup, Germany). Sign-in emails are sent through a transactional email provider in the EU (Brevo, France) acting as our processor under a data-processing agreement. Backups are encrypted and kept 30 days on EU storage. Nobody else.
When paid plans open, payments will be handled by a payment provider acting as merchant of record; it will receive what a payment needs (email, country, amount) under its own privacy policy, which we will link here. We never see card numbers.
How long we keep it
| Account, profiles, workshop, garments | Until you delete them or your account |
|---|---|
| Sign-in codes | 10 minutes, then unusable; rows purged |
| Accounts inactive for more than 24 months | Anonymised |
| Technical logs | 90 days |
| Anonymous analytics | Aggregated, no limit (not personal data) |
| Invoices | 10 years (legal obligation) |
Your rights
At any time you can:
- know which data we hold about you (access);
- correct them (rectification) — your profiles and garments you edit yourself;
- delete them (erasure) — every garment can be deleted from the editor, and the account on request;
- export them: every garment downloads as a readable .tricotta file, always, free;
- restrict or object to a processing;
- withdraw a consent you gave.
Write to privacy@tricotta.com; we answer within 30 days. If you think we break the law you can complain to your data-protection authority — in Italy the Garante per la protezione dei dati personali.
Security
HTTPS everywhere, no passwords to leak, sign-in codes stored hashed, database reachable only from the application, encrypted backups, security updates applied within days. Access to the administration is limited to staff with named accounts.
Children
Tricotta is not addressed to children under 16 and we do not verify age. If we learn we hold such data without parental consent we delete them.
Changes
If this policy changes we say so on the site; for substantial changes (new purposes, new recipients) account holders are emailed 30 days in advance. Earlier versions stay available on request.
Last update: 2026-09-01 · version 1.0 · see also the cookie policy.