EasyDST

Privacy policy

Last updated: 20 October 2026

EasyDST turns an image or a logo into an embroidery .DST file. This page explains what data we process, why, for how long, and how to delete it.

Who is responsible

EasyDST is published by Charles Lepoittevin, entrepreneur carried by SARL Potentiel Humain, SIRET 879 988 228 00034 (France). For any question or request about your data: [email protected].

Data we process

Account: email address, name if you provide it, password stored as a salted scrypt hash (never in clear). Files: the image or logo you upload, the generated .DST file, its preview, and design measurements (stitch count, dimensions). Service: credit balance, purchases (amount, date, Stripe status), social share requests (post URL), referral code. Analytics: page views, country, device type, language, referring site, as an anonymous fingerprint — the IP address is not kept.

Why we process it

To provide the service (convert, store, deliver your files), manage your account and credits, take payments, prevent fraud and abuse, answer your requests, and produce aggregated statistics to improve the site. No data is sold or used for targeted advertising.

Brody AI generator

When you use Brody, the description you type and the resulting vector drawing are sent to OpenRouter, an AI provider, to generate the design. Do not include personal data there: describe the visual only.

Processors

Hostinger (server hosting, European Union), Cloudflare (domain name and site protection), Stripe (card payments, no card data reaches our servers), OpenRouter (Brody design generation). These providers only access data to perform their service.

Retention

Account and files: until the account is deleted, and at most 30 days after generation for working files. Analytics: 12 months. Purchase records: 10 years, without any link to your identity (accounting obligation).

Cookies

One technical session cookie (edst_session, 30 days) to stay signed in, and one referral cookie (ref, 30 days) if you arrive from a friend’s link. No advertising cookie, no third-party tracker on the site.

Your rights

You may request access, rectification, portability, restriction or erasure of your data, and object to its processing. Account deletion is immediate from the “Delete my account” page. You can also write to [email protected]: we answer within one month. If you disagree, you can contact the CNIL (cnil.fr).

Minimum age

The service is intended for people aged 16 and over. An account created by someone under 16 can be deleted on request.

Security and changes

Traffic is encrypted (HTTPS), passwords are hashed, and file access is restricted to their owner. This policy may change: the date at the top of the page shows the latest version.

Delete my account and my data