Privacy Policy
Snootsouls is a tiny crochet shop, and we treat your details the way we’d want ours treated.
Last updated: 24 September 2026
The short version. We ask for your email so we can send you the patterns you buy and let you re-download them later. We never see your card details — Stripe handles payment. We don’t use Google Analytics, advertising cookies, or any third-party trackers, and we never sell your information to anyone.
1. Who we are
Snootsouls LLC (“Snootsouls”, “we”, “us”) runs the shop at shop.snootsouls.com, selling digital crochet patterns and handmade plushies. We are based in the United States and are responsible for the information described here.
Postal address:
Snootsouls LLC
5830 E 2nd St, Ste 7000 #37686
Casper, WY 82609, United States
For anything at all about your data, email hello@snootsouls.com — a real person reads it.
2. What we collect
Information you give us
- Your email address — to create your account, send your sign-in codes, and deliver what you order.
- A password, only if you choose to set one. It is stored as a one-way scrambled value (scrypt); we cannot read it, and neither could anyone who stole the database.
- Your orders — what you bought, when, how much it cost, and whether it has been delivered.
- Your saved list — the items you tap the heart on.
- Delivery address, for physical plushies. This is collected and held by Stripe during checkout, not by us.
- Anything you write to us by email.
Information collected automatically
- Pages you view on the shop, and the site that referred you, tied to a random session number — never to your name.
- Your IP address, used to limit repeated sign-in attempts and stop abuse. It is stored only alongside sign-in code requests and rate-limit counters, and is not used to profile you.
- Standard technical details your browser sends with every request (browser type, language), which our host processes to serve the page.
What we never collect
Your full card number, expiry date, or security code. Those go straight to Stripe and never touch our servers. We also don’t use advertising networks, social-media pixels, or third-party analytics — the web fonts are served from our own domain, so not even Google is told that you visited.
3. Cookies
We use two cookies. Both are first-party and httpOnly (JavaScript on the page cannot read them). There are no advertising or cross-site tracking cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
snoot_customer | Keeps you signed in so you can see your orders and re-download your patterns. Essential — the account area cannot work without it. | 30 days |
snoot_sid | A random number so we can count visits and see which patterns people look at. It holds no personal details and is never shared. | 1 year |
Your shopping cart is kept in your own browser’s storage on your device — it is never sent to us until you check out.
4. Payments
Card payments are handled by Stripe. When you check out you are taken to Stripe’s own secure page; they collect your card and billing details directly and tell us only that the order was paid, plus your email and the items. Stripe is an independent controller of that data — see the Stripe Privacy Policy.
5. How we use your information
- To take your order and email you your pattern PDFs.
- To run your account, so you can sign in and download purchases again later.
- To reply when you contact us.
- To protect the shop — limiting repeated sign-in attempts and blocking abuse.
- To understand, in aggregate, how the shop is used so we can improve it.
- To keep the records that tax and accounting rules require.
We do not use your information to make automated decisions about you, and we do not send marketing emails unless you ask us to.
6. Our legal bases (for UK and EEA customers)
- Performing our contract with you — taking payment, delivering patterns, running your account.
- Legitimate interests — keeping the shop secure and understanding how it is used, in a way we have kept as privacy-friendly as we can.
- Legal obligation — keeping sales records for tax.
- Consent — for anything optional, which you can withdraw at any time.
7. Who we share it with
Only the services needed to run the shop. Each one handles the data on our instructions, and we never sell your information.
| Service | What it does |
|---|---|
| Vercel | Hosts the website and serves the pages |
| Neon | Hosts the database with accounts and orders |
| Stripe | Processes card payments |
| Namecheap Private Email | Sends your order and sign-in emails |
| Cloudflare | Handles the domain name lookup |
We may also disclose information if the law requires it, or to protect our rights and those of our customers.
8. How long we keep it
- Account and order records — for as long as you have an account, and afterwards for as long as tax and accounting rules require us to keep sales records.
- Sign-in codes — they expire after 10 minutes and are single-use.
- Visit statistics — kept in aggregate; they are not linked to your name.
Ask us to delete your account and we will, subject to those record-keeping rules.
9. How we protect it
- The whole site is served over HTTPS, so traffic is encrypted.
- Passwords are stored scrambled (scrypt), never in plain text.
- Sign-in codes are stored scrambled, expire quickly, and are single-use.
- Pattern PDFs can only be downloaded by the account that bought them — every download is checked against your order.
- We run automated security tests against the live site regularly.
No system is perfectly secure, but if a breach ever affected your rights we would tell you and the relevant authority as the law requires.
10. Your rights
Wherever you live, you can ask us to:
- give you a copy of the information we hold about you;
- correct anything that is wrong;
- delete your account and data;
- send your data to you or another service;
- stop or limit how we use it, or object to a particular use;
- withdraw consent you previously gave.
Email hello@snootsouls.com and we’ll sort it out — normally within 30 days, free of charge. We won’t charge you or treat you differently for asking.
If you are in California or another US state with a privacy law
You have the right to know what personal information we collect, to request a copy, to have it corrected or deleted, and not to be discriminated against for exercising those rights. Some laws also give you a right to opt out of the “sale” or “sharing” of personal information and of targeted advertising — we do none of those things, so there is nothing to opt out of. We do not sell your data and we run no advertising trackers.
If you are in the UK or the EEA
The GDPR applies to you even though we are in the United States, because we offer goods to you. In addition to the rights above, you can complain to your national data protection authority — you can find yours through the European Data Protection Board, or the ICO in the UK. We’d appreciate the chance to put things right first.
11. International transfers
We operate from the United States, and the services listed above may process data in the US and other countries. If you order from outside the US — for example from the UK or the EEA — your information will be transferred to the US, which has different data protection laws from your own.
Where that transfer is from the UK or the EEA, it relies on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), which our providers have in place.
12. Children
The shop isn’t aimed at children. We don’t knowingly collect personal information from anyone under 13 (or under 16 in the UK and the EEA). If you believe a child has given us data, email us and we will delete it.
13. Changes to this policy
If we change how we handle your information we’ll update this page and the “last updated” date above. Significant changes will be made clear.
14. Contact us
Questions, requests, or concerns: hello@snootsouls.com, or use the contact page. 🧶