Privacy & cookie policy

1. Who we are

YarnPair is the data controller for the personal data processed through this service. You can reach us at [email protected]. This policy explains what we collect, why, how long we keep it, and the choices you have. It covers the website, your account, our cookie consent banner, and the measurement and advertising pixels we use.

2. What we collect and why

Account data. E-mail address, display name, language and unit preferences. Purpose: to create and operate your account. Legal basis: performance of a contract (GDPR art. 6(1)(b)). Your content. Saved yarns, stash entries, price alerts and taste preferences. Purpose: to provide the features you use. Legal basis: contract. Interest signals. Pages and yarns you view, used to improve recommendations and catalogue quality. Legal basis: legitimate interest (art. 6(1)(f)); where required, consent. Lead data. If you unlock content with your e-mail, we store the e-mail, your locale and whether you consented to the newsletter and contest. Legal basis: consent (art. 6(1)(a)). Outbound click records. When you click a shop link, we log an anonymised click ID, the yarn, the shop and your locale, so we can measure and reconcile affiliate commissions. The click ID cannot be used to identify you. Legal basis: legitimate interest. Technical data. IP address (short-retained), browser type and device, for security and debugging. Legal basis: legitimate interest.

3. Cookies and tracking technologies

We use three categories, and nothing but the necessary ones is set before you choose in the consent banner: - Necessary — login session, consent choice, security. Always on. - Analytics — privacy-respecting measurement of how the site is used, so we can improve it. Optional. - Marketing — pixels and tags from advertising platforms (e.g. Meta, Google, Pinterest, TikTok, Microsoft) that measure ad performance and may build audiences. Optional. You can change or withdraw your consent at any time via the cookie settings link in the footer. Where supported, we honour Google Consent Mode, so declined consent is signalled to Google tags automatically.

4. Server-side measurement (Conversion APIs)

If you consent to marketing cookies, some events (e.g. outbound clicks, sign-ups) may also be sent server-to-server to the advertising platform that showed you the ad, using hashed identifiers. This makes measurement work even when browsers block cookies. Without marketing consent, no such events are sent.

5. Who we share data with

- Hosting and database provider — stores all site data within the EU/EEA or under valid transfer mechanisms. - E-mail provider — sends login links and, with consent, newsletters. - Advertising platforms (Meta, Google, Pinterest, TikTok, Microsoft) — only if you consent to marketing cookies; they act as independent controllers under their own policies. - Affiliate networks and shops — receive the anonymised click ID when you visit or buy, so a commission can be attributed. They do not receive your name or e-mail from us. Where data is transferred outside the EU/EEA, it is protected by the EU Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

• Account and content: until you delete your account, plus up to 30 days of backup retention.
• Interest signals: 12 months, then anonymised or deleted.
• Outbound click records: 24 months, for commission reconciliation.
• Lead e-mails: until you withdraw consent or the contest ends, whichever is later.
• Server logs: 30 days.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or port your personal data, and to object to processing based on legitimate interest. You can withdraw consent at any time with effect for the future. To exercise any right, write to [email protected] — we answer within 30 days. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

8. Children

YarnPair is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy when the service or the law changes. The current version is always on this page; material changes will be flagged before they take effect. Last updated: October 2026