Privacy policy
Last updated: 5 November 2026
This English version is provided for convenience; the French version prevails.
Grillo is built to keep as little data as possible: no ads, no analytics, nothing sold, and your files are erased after one hour.
Data controller
FOXTROP, sole trader, publisher of Grillo — 66 Avenue des Champs-Élysées, 75008 Paris, France — [email protected].
Without an account: your files
When you upload a chart (PDF, scan, photo) or a photo to convert, the file and the PDFs made from it are kept only while they are processed, in the server’s memory, then automatically erased after one hour at most. They are not published, shared or used for anything else (in particular not to train models). They are not linked to your identity.
Your IP address is used in memory, without being stored in a database, to limit abuse (uploads per hour). The web server’s technical logs (IP address, page requested, date) are kept for at most 14 days for security.
With an account
| Data | Why | How long |
|---|---|---|
| E-mail address, language, sign-up and last sign-in dates | Create and run your account, send sign-in links | Until you delete the account, or after 3 years without signing in |
| Google name and account identifier (only if you choose “Continue with Google”) | Sign you in with Google | Same |
| Sign-in sessions: hashed identifier, dates, browser type | Keep you signed in | 60 days at most |
| Sign-in links sent by e-mail (stored as a hash) | Check the link | Valid 20 minutes, erased within 24 h |
| Charts saved in “My charts”: the PDF made by Grillo, a thumbnail, the chart data, your stitching progress | Find them again and track your stitching — only if you turn saving on or click “Save” | Until you delete them, or with the account |
| Thread box: DMC numbers and skein counts you noted | Work out your shopping lists | Until you remove them, or with the account |
| Log of admin actions on your account (premium plan, suspension, sign-out) | Run and secure the service | 1 year |
The original file you uploaded is never saved to your account: only the chart Grillo made is, and only when you ask.
Legal bases
- Providing the service you ask for (performance of a contract, GDPR art. 6(1)(b)): file processing, account, saved charts.
- Keeping the service secure and preventing abuse (legitimate interest, art. 6(1)(f)): IP limits, technical logs.
Grillo only sends e-mails the service needs (sign-in links). No newsletter is sent without your consent.
Who has access
Only Grillo’s publisher. These technical providers process data on its behalf, only to run the service:
- the server host: Contabo GmbH;
- Cloudflare, Inc. (network, security): site traffic goes through its servers, including outside the European Union; Cloudflare is certified under the EU–US Data Privacy Framework and bound by standard contractual clauses;
- Brevo (Paris, France): sending sign-in e-mails (your e-mail address and the e-mail content);
- Google Ireland Limited: only if you choose “Continue with Google”; Google then knows you sign in to Grillo, under its own privacy rules.
Your data is never sold or rented.
Audience measurement
To learn which pages are useful, Grillo counts visits without cookies and without storing IP addresses: each page only sends its address and the site you came from. Only daily totals are kept (page views, number of visitors, referring sites, device type, language, words typed in the site search — never an e-mail address). So the same person isn’t counted twice in a day, a fingerprint is computed in memory from the IP address and browser with a key drawn at random each day and never stored: it vanishes that evening and can’t identify you. These totals are kept for 25 months. If your browser sends Do Not Track or Global Privacy Control, you aren’t counted. Following the French data protection authority (CNIL), this site-only measurement needs no consent.
Cookies
Grillo uses no advertising or analytics cookies. The only cookies are strictly necessary for your account, so no consent banner is needed:
| Cookie | Purpose | Lifetime |
|---|---|---|
grillo_session | Keep you signed in (not readable by page scripts) | 60 days |
grillo_in | Show “My account” instead of “Sign in” (only contains “1”) | 60 days |
grillo_oauth | Secure the Google sign-in | 10 minutes |
So stitch tracking works offline, the open chart and ticks not yet sent are also kept in your browser’s storage, on your device only; they are erased when you sign out or delete your account.
“Buy at…” links lead to a partner merchant’s site. Grillo sends it no data about you: the merchant only knows you came from Grillo. Once on its site, its own privacy rules and cookies apply.
Security
Encrypted connection (HTTPS), no passwords to store, links and sessions kept only as hashes, your charts readable only by your account, uploaded files erased automatically. Database backups are kept for 14 days.
Your rights
You can access, correct, erase or get a copy of your data, object to processing or ask to restrict it, at any time:
- directly from My account: “Download my data” (JSON file) and “Delete my account” (immediate and permanent, charts included);
- or by writing to [email protected] (answer within one month).
If you think your rights are not respected, you can complain to the French data protection authority, the CNIL (cnil.fr), or to your own country’s authority.
Children
Accounts are for people aged 15 and over, or with a parent’s consent.
Changes
This policy may change with the service (for example when subscriptions arrive). The update date is shown at the top; account holders will be told about significant changes.