UPDATED OCTOBER 24, 2026

Privacy, in plain language

Stitch is a temperature blanket companion by Cait’s Closet. This page describes how this version works.

Your account and blanket

Firebase Authentication, provided by Google, handles your email, password credentials, sign-in sessions, verification and password recovery. Stitch does not store your password in its application database. Your browser remembers your Firebase session so you can return to crafting.

Cloud Firestore stores your blanket year, temperature preference, location input and resolved coordinates/timezone, yarn palette and optional names, daily temperatures, weather history, completion status, and saved craft snapshots. Account activation and later local-calendar-day usage metadata, a random analytics identifier, first-touch campaign slugs, and private support/deletion requests are also stored there. Public support requests store the reply email, category and message separately from blanket data. Ownership rules restrict private project data to its account. The service owner can access data for operation, support and deletion.

Location and weather

You enter a city, region or ZIP. Stitch does not request device GPS access. Our server sends the entered location or resolved coordinates and requested dates to Visual Crossing to resolve the location and obtain daily highs. Visual Crossing is a third-party weather provider. Completed yarn and temperatures stay saved when you change your setup.

Optional usage analytics

With your permission, Google Analytics records steps such as visiting the landing page, starting setup, creating an account, configuring yarn, loading weather, completing a row and returning on a later day. On the temperature blanket sales page, this also includes page views and clicks to buy on Etsy, with the button’s section, time, and campaign source, medium, campaign, creative label, and keyword when supplied. After sign-in and consent, a random account identifier associates usage across browsers and devices. It may receive campaign slugs and the referring site’s domain. We do not send your email, password, exact location, coordinates, authentication tokens, yarn names, or blanket content as analytics events.

Google Analytics uses cookies and processes device/browser and network information under Google’s policies. Advertising personalization and Google signals are disabled in our tag. Declining analytics keeps the tag unloaded. Do Not Track is respected. Your consent choice, selected year and first-touch campaign slugs are saved locally in your browser. Account activation and qualifying later-date workspace use are saved in Firestore even when analytics is declined. Your first-touch attribution is kept through signup and is not overwritten on later visits.

The sales page keeps filtered campaign labels in this tab’s session storage for 30 minutes after its last page view or measured click, so a reload can retain attribution. These labels are sent to Google only with analytics permission. Etsy purchases happen on Etsy; a click from Stitch does not tell us whether you completed a purchase.

Hosting and retention

Vercel hosts Stitch and processes requests, which can include ordinary network and error logs. Firebase and Visual Crossing process data needed to provide their services. Stitch keeps your saved project data until it is removed through the deletion process; this version has no automatic expiration policy.

Your controls

You can sign out, request a password reset, edit your location and palette, or request deletion of a blanket or your account and associated application data in Account. Deletion requests are reviewed by the owner to avoid partial removal of craft history. Send a private support or deletion request. If you can’t sign in, use the public account-access form on Support. Replies may take time.

Questions about this page can be submitted through Support. This page describes current behavior and does not promise uninterrupted service or protections beyond the actual implementation.