Security and privacy

Your password and your session

Passwords are stored in a securely hashed form, so we never see yours and cannot read it back. That is why we never send it to you; we send a code so you can set a new one.

A single cookie keeps you signed in for about a week and renews as you use the platform. Sign out ends that session on this device.

Pick a long password you do not reuse elsewhere, and do not share your login: an account is for one person under the Terms of Service.

Cookies

We use three essential cookies only: the sign-in session that keeps you in your account, Theme which remembers light or dark, and Language which remembers Arabic or English. The last two stay on your device until you clear them.

Cloudflare, the security layer in front of the site, may also set its own strictly necessary cookies, for example to tell a real visitor from a bot.

Because all of these are essential, the site shows no consent banner. The full list is on the Cookie Policy page.

Where your data is stored

Your data is stored on our own server, operated within the European Union.

Your card and bank details never pass through the platform: all payments are handled by Stripe on their own pages, and we keep only a reference to your Stripe customer so your plan stays in sync.

What we collect

Account details: your name, email, an optional phone number, and a securely hashed password.

Your content: the projects you create and the fonts you upload.

Your plan and subscription state, plus your Stripe customer id.

A small record of account and billing actions, kept for security.

Who can see your work

Your projects and uploaded fonts are private to your account and are not shown to other users. What you create and what you upload stay yours; we claim no ownership of them.

The permission we take is only what is needed to store and process your content so the service runs: saving your projects and rendering your fonts, nothing more.

If support ever needs to sign in to your account to help you, it does not happen quietly: a warning strip appears at the top of the screen with Return to my account to end that session.

We do not sell your data, we run no advertising, and we load no cross-site tracking.

Your rights

Under European data protection law (GDPR) you can see the personal data we hold about you, correct anything wrong in it, delete your account and its private content, and get a copy of your data to take elsewhere.

For any of these, write to us from your account email at [email protected]. Account deletion works this way today, since there is no button for it on the site.

If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

Keep your own copy

The best protection for your work is a copy on your own device. In the Projects dialog use Download project for one piece, or Export all to download everything as a zip.

In the Font Builder, Download .fontpack saves a font you built, so it stays with you whatever happens.