Skip to content

Legal

Privacy policy

What Nessie stores, who can see it, and how to get it back or get rid of it. No advertising, no data sold, and no analytics until you say yes. That is the whole of it, and the rest is detail.

Last updated 17 September 2026

  1. 1.Who we are

    Nessie is a browser-based design tool for stained glass. This policy covers the Nessie website and the studio you sign in to.

    If you want anything here explained, or want your data out or deleted, email hello@nessiedesign.com and a person will answer.

  2. 2.What we collect

    Only what the product needs to work:

    • Account details: your email address, and whatever name, username or picture you add. These are held by Clerk, our sign-in provider. We never see or store your password.
    • Profile and preferences: a short bio, your avatar color, skill level, interests, measurement units and email opt-ins, if you fill them in. These sit in Clerk's user metadata.
    • Your panels: the designs you draw, their settings, and their revision history, so you can pick a panel back up on another machine.
    • Community activity: posts and replies you write, and the posts you like or save.
    • Newsletter signups: just the email address you typed, and which form you typed it into.

  3. 3.What we do not collect

    There is no advertising code anywhere on this site. We do not build a profile of you, we do not sell or rent your data, and we do not train anything on your designs.

    We do not take payments on the site, so we never handle card details. If you ask to buy something from the shop, we invoice you directly and payment happens outside Nessie.

  4. 4.Cookies and browser storage

    Clerk sets a cookie to keep you signed in. That one is necessary, because without it you would be signed out on every page, and it is set whether or not you accept anything else.

    A few things are kept in your browser's own storage and never reach us: your shop basket, whether you prefer the grid or list view in your studio, a local copy of a panel you are editing so a crash does not lose your work, and your answer to the cookie banner.

    Everything else waits until you say yes. If you do, we use two analytics services to understand how the site is used:

    • Google Analytics: which pages are visited, roughly where from, and on what kind of device. We ask it to shorten your IP address.
    • Microsoft Clarity: anonymous recordings of how people move through a page, which is how we find the things that are confusing rather than broken.

    Neither is loaded at all until you accept, so nothing is set in advance and then cleared afterwards. You can change your mind at any time from the Cookies link at the bottom of any page; because a script cannot be unloaded once it has run, reload the page afterwards and clear the cookies those services set if you want them gone straight away.

  5. 5.Who else processes your data

    Three companies, each doing one job:

    • Clerk: accounts, sign-in, passwords and two-factor.
    • Supabase: the database holding your panels, revisions and community posts.
    • Vercel: hosting and delivery of the site itself.
    • Google and Microsoft: analytics, and only if you accept it.

    Each has its own privacy policy, and each is bound to process data only on our instructions.

  6. 6.How long we keep things

    Your panels and posts stay until you delete them or ask us to close your account. Deleting a panel removes it and its revision history. Deleting a reply hides it from the thread.

    Newsletter addresses stay until you unsubscribe or ask us to remove them.

  7. 7.Your choices

    • See or change your account details: in your studio, under Settings, Security.
    • Delete your account: the same place. That removes your account and the panels attached to it.
    • Get a copy of your data: email us and we will send it over.
    • Stop the emails: the opt-ins live in Settings, Preferences, and every newsletter has an unsubscribe link.

    If you would rather ask a person for any of this, hello@nessiedesign.com reaches us directly.

  8. 8.Children

    Nessie is not aimed at children, and accounts are meant for people aged 13 and over. If you believe a child has created an account, tell us and we will remove it.

  9. 9.Changes

    If this policy changes in a way that matters, we will say so on the site rather than quietly editing the page. The date at the top is when it last changed.