HoopReady
Privacy
Last changed 1 October 2026.
HoopReady turns artwork into machine embroidery files, on this website and in the HoopReady iOS and Android apps. To do that we keep your e-mail address, the artwork you send and the order you place — and as little else as we could manage.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Your e-mail address | To sign you in with a one-time link or code, to send you order mail and — only if you ask for it when you order — one reorder reminder | As long as you have an account |
| Your mail preference | Whether you asked for reorder reminders, and when you asked or unsubscribed, so we mail only people who asked | As long as you have an account |
| The artwork you upload | To measure it in the free check and to make your files from it | Deleted 12 months after upload by a daily job, unless an open order still needs it |
| Your orders | Package, width, placement, the words in the design and any note you write, so we can make and re-deliver the files | As long as we run the service, so you can download your files again |
| The stitch files we make | So you can download them again | As long as we run the service |
| Payment confirmation | Amount, product and the payment provider's order reference (in the apps, the App Store or Google Play transaction number), to mark an order paid | Kept as bookkeeping |
| Sign in with Apple or Google, in the app | The account number Apple or Google gives us for you and the e-mail address they confirm (with Apple's Hide My Email, a relay address), so that signing in again finds the same account | As long as you have an account |
| The app installation | A random number the app makes when it is installed, and the public key of Apple's App Attest on iOS or a Google Play Integrity verdict on Android, so the free check and sign-in codes only answer a genuine copy of the app. They say nothing about you and are not linked to your account | As long as we run the service |
We never see your card. On the website, payment is taken by Polar on its own checkout page; in the iPhone app, by Apple through the App Store; in the Android app, through Google Play. What reaches us is the confirmation that an order was paid.
Who processes it for us
| Service | What it does for us |
|---|---|
| Cloudflare | Runs the site, its database and the storage your artwork and files sit in; its Turnstile check keeps bots off the free check and the sign-in form |
| Polar | Takes the payment as merchant of record: the charge and the receipt are Polar's, and it handles sales tax and VAT |
| Resend | Delivers our e-mail: sign-in links, order mail and, if you asked for it, the reorder reminder |
| OpenRouter and the image model it routes to (currently OpenAI's) | Only with your explicit permission, after payment, your artwork and design notes are shared with AI service providers to create the preview. Providers may change; the current providers are listed here. Without permission, artwork is prepared by hand. Nothing is sent before payment |
| PostHog | Counts how the site is used — see the next section |
| Apple | In the iPhone app: takes the payment for an in-app purchase as the seller, runs Sign in with Apple if you choose it, and App Attest (above) |
| Runs Sign in with Google in either app if you choose it, and Play Integrity and Google Play payments in the Android app | |
| RevenueCat | In both apps: records App Store or Google Play purchases for us under your internal account number, with the order number the purchase is for, so we can confirm the payment and handle refunds |
These companies are mostly in the United States, so your data may be processed there. We do not sell your data, show ads or use advertising trackers, and we never publish or show your design to anyone.
The mobile apps
The app reaches only the photo you pick (the system picker gives it nothing else) and, if you take one, the camera picture. A DST file you open in its Viewer is read on the phone and never uploaded. The app runs no analytics of its own; the steps of an order placed in it are counted by our server as described below. Instead of a cookie it keeps your sign-in as a token in secure storage (the iOS keychain or Android Keystore-backed encrypted storage), for up to 90 days.
E-mail we send
Order mail — sign-in links, payment, the preview to approve, delivery and change rounds — goes to everyone who orders, because it is part of the order. Anything else is opt-in: the order form has an unticked box, and only if you tick it do we send one reorder reminder, a month after your order is delivered. Every such mail has a one-click unsubscribe link, which works without signing in; unsubscribing never stops the mail that belongs to an order you place.
Analytics
We count page views and a handful of steps — a file chosen for the check, a check answered, an order created, paid, approved, delivered, a reorder reminder asked for, sent or unsubscribed from — with PostHog. What travels with those events is numbers and categories only: package, width, verdict, colour count, file format. Never the artwork, a file name, a note you wrote or your e-mail address. A signed-in customer is identified by an internal account number; a visitor who never signs in gets no profile. Screen recording is switched off. PostHog stores an identifier in your browser (a cookie and local storage) to tell one visit from the next, and, like any web server, receives your IP address, which it uses to estimate your country.
Cookies
| Name | What it is for |
|---|---|
| hr_session | Keeps you signed in for up to 30 days. Only set when you sign in; not readable by scripts |
| PostHog's | Analytics, as above |
Your data, on request
You can delete your account yourself, in the app under Account → Delete account or on the website at /account/delete: your account, the artwork and files we keep for you, your sign-ins and the purchase record RevenueCat holds for it are deleted. Or write to orders@hoopready.app from the address on your account and we will send you what we hold about you, correct it, or delete it. Payment records stay as bookkeeping without your details in them, and Polar, Apple or Google Play keeps its own record of the payment.
Changes
When this page changes, the date at the top changes with it.