Privacy policy

SkeinVault is a small tool for keeping track of your own yarn. It was built for one household and a handful of invited friends. There are no adverts, no tracking, no analytics, and nothing is sold to anybody.

What is stored

The yarn you enter yourself: brands, yarns, colours and dye lots — including the lot number, how many balls, how much is left, and what a lot is set aside for if anything. One photograph per colour, if you take one. And your email address, because that is what you sign in with.

Where it lives

Your data is inside the EU. The database and the photographs are with Supabase in Frankfurt, and they do not leave the EU.

The website itself — the files your browser fetches in order to draw the page — is with Microsoft Azure, and is copied to servers around the world so that the page loads quickly wherever you are. There is nothing about you in those files. They are the same for everybody.

Who can see it

Only you. Your yarn is yours alone, and that includes the administrator — the person who grants access cannot see anybody's yarn. There is no sharing in the app, not even read-only, and there is no way to look at somebody else's stash.

Photographs of labels

When you photograph a label, the picture is sent out of the app to a service that reads the text on it and proposes what it says. That service is not necessarily in the EU, so the picture may be processed outside the EU — but it is only ever stored in the EU. The picture of the back, the one with the lot number, is read and thrown away. The picture of the front is kept with your colour if you want it kept.

Nothing read off a photograph is ever saved without you seeing it first.

Signing in with Google

You sign in with your Google account. The app sees your email address and your name and asks for nothing else. It never sees your password and does not store one — there is no password here at all.

Invitations and access

You can only get in if you have been invited. The administrator adds your Google account to the list, and can remove it again.

Every invitation and every removal is recorded permanently: the address, whether it was an invitation or a removal, when it happened, and who did it. That record cannot be edited or deleted by anybody, including the administrator. It exists because it is the only thing that can answer "was I removed, or is the app having a bad day?", and from the sign-in screen those two look identical. It holds nothing about anybody's yarn.

If your access is removed while you are signed in, the app locks you out within about an hour. Your yarn is not touched.

How long it is kept

For as long as you keep using the app.

If you want it deleted

Write to the address below and it will be deleted — your yarn, your photographs and your account. The only thing that remains is the lines in the invitation record above, which nobody can delete.

What the app does not do

It does not send email. It uses no analytics or tracking tools. It shares nothing with anybody. It does not talk to Ravelry or any other yarn site. The only thing sent to another service is the label photograph described above.

Cookies and what the browser remembers

The app keeps your sign-in session in the browser so you do not have to sign in every time. That is all. There are no analytics or advertising cookies.

Contact

Write to dpo@afroditevej5.dk. Google's sign-in screen shows a different address — it is the same person. Google only allows the account the app was created with.

Last changed 2026-09-15.