What data Moulinery processes, why, who it is shared with and how to have it deleted.
Version of 23 August 2026
Your images never leave your browser. The chart is computed on your own device. The server receives neither your source images nor copies of them — neither when you work without an account, nor when you use synchronisation.
Without an account we collect nothing. No cookies, no counters, no third-party services.
With an account we store your email address, your name and the charts you saved. They are deleted in full at your request.
The controller is the author of the Moulinery service (moulinery.com). You can reach us at hello@moulinery.com; we reply within 30 calendar days.
2.1. The core function of the service — turning an image into a cross stitch chart — works without registration and without sending any data to the server.
2.2. The service is a set of files that your browser downloads once and then runs on its own. Analysing the image, matching floss, drawing the chart and estimating thread use are all performed by your device's processor.
2.3. You can verify this: open your browser's developer tools, go to the network tab, and load an image. After the page itself has loaded, no outgoing requests occur.
2.4. When used without an account, the service sets no cookies and loads no third-party services — no analytics, no advertising, no fonts from external servers. This is enforced technically: the service is delivered with a content security policy that forbids the browser from contacting any address other than our own.
3.1. The service saves the following in your browser's local storage: your chosen chart settings, the interface theme and language, and the projects you saved — the source image, the settings, the computed chart and a thumbnail.
3.2. This data stays on your device. The controller has no access to it and receives no copies of it.
3.3. You can delete it inside the service (the delete button in your gallery of projects) or through your browser, by clearing the site's data.
4.1. Synchronising projects between devices requires an account. Signing in is handled by Google's authentication service.
4.2. When you sign in, the service receives the following data from your Google account: email address, display name, profile picture and your permanent Google user identifier.
4.3. This data is used solely in order to: recognise you when you sign in again, associate your saved projects with you, show your name in the interface, and send you service messages about how the service operates.
4.4. Data received from Google is not used for advertising, is not shared with advertising networks or data brokers, is not sold, and is not used to train machine learning models. Use of this data is limited to the purposes named in clause 4.3 and complies with Google's Limited Use requirements for user data.
4.5. The legal basis for this processing is performance of a contract with you — providing the service you requested.
5.1. If you are signed in, your saved projects may be stored on the server so that you can open them on your other devices.
5.2. The following is sent to the server: the project name, its settings, the computed chart and a reduced thumbnail for the gallery.
5.3. Source images are never sent to the server and remain on the device you loaded them from.
5.4. The legal basis is performance of a contract with you.
6.1. You may choose to publish a finished piece in the service's shared gallery. Publication happens only through your own direct action.
6.2. Published material and the author name you provide become visible to other users. Do not publish anything you do not want shown.
6.3. The legal basis is your consent. Consent is withdrawn by deleting the publication.
7.1. To understand which features are used, the service may collect anonymous information about events: opening the service, loading an image, building a chart, printing, exporting. Only technical characteristics are sent with an event — for example the number of colours and the size of the chart.
7.2. The counter sets no cookies and writes nothing to your browser. The session number exists only in the tab's memory and disappears with it; it cannot be used to link two of your visits together.
7.3. The list of permitted events and their fields is fixed in the service's source code: anything outside that list is not transmitted. File names, image contents and any personal data are not part of it.
7.4. The legal basis is the controller's legitimate interest in understanding how the service is used, which does not override your rights, because the processing is anonymous.
8.1. The site is hosted on infrastructure operated by Cloudflare, Inc. Like any hosting provider, it processes technical information about each request: IP address, browser version, the address requested and the time of the request. Pages cannot be delivered without this information.
8.2. The controller sees only aggregate, anonymised traffic figures — never information about individual people.
8.3. Infrastructure providers act as processors on the controller's instructions.
9.1. The controller does not sell personal data and does not share it with advertising networks or data brokers.
9.2. Disclosure is possible only to: infrastructure providers acting on the controller's instructions and bound by confidentiality obligations; and where required by law, a court or a competent authority.
10.1. Account data and synchronised projects are kept for as long as the account exists.
10.2. You can delete an individual project or your entire account from within the service. Deleting an account results in the deletion of the data associated with it within 30 days, including backups.
10.3. You may also request deletion by writing to hello@moulinery.com.
10.4. Data held in your browser is deleted by you and does not depend on an account.
11.1. In relation to your personal data you have the right to: obtain a copy of it, request correction of inaccurate data, request its deletion, restrict or object to processing, receive the data in a machine-readable format and transfer it to another controller, and withdraw consent you previously gave.
11.2. To exercise any of these rights, an email to hello@moulinery.com is enough.
11.3. If you are in the European Economic Area, you have the right to lodge a complaint with the data protection supervisory authority of your country of residence.
12.1. The service uses no cookies for analytics, advertising or tracking. This is why there is no consent banner.
12.2. Signing in to an account uses a strictly necessary session mechanism, without which signing in is impossible. It requires no consent and is not used for tracking.
13.1. The infrastructure that runs the service is located in various countries. Transfers of data take place on the basis of standard contractual clauses or other mechanisms provided for by law.
14.1. The service is not intended for people under 13 and does not knowingly collect their data. If such data has been received in error, it is deleted upon request to the address above.
15.1. This policy may change. A new version is published on this page with its date.
15.2. We notify you of material changes affecting the processing of your data in the service's interface and, if you have an account, also by email.