Privacy

We collect account identifiers, verified email or Google identity information, session records, subscription status, profile names, derived SVG/font artifacts you explicitly synchronize, and security events needed to operate MakeFont. Original source images and generated sheets remain in local browser storage.

We do not need or request payment-card numbers. Stripe collects payment details on its hosted checkout pages and returns billing identifiers and payment status to MakeFont.

• Font description, optional original file, default recognition language, and creation time stored locally in your browser.
• For new signed-in uploads, your font description and optional bounded reference image are sent to Cloudflare AI. Text is first checked for font-generation intent; an accepted request generates one complete character sheet, stored locally. Production does not retain the submitted text or images in server processing logs.
• Operational metadata such as account actions, error categories, and idempotency keys; the AI font-sheet request does not create a server image-processing log.

Selecting an image or writing a description does not submit it. On Submit, the browser saves your draft in IndexedDB before a Google or email sign-in redirect. Returning restores the draft without submitting it automatically. Drafts expire after twenty-four hours; clearing site data removes them sooner.

The browser prepares glyph crops, runs VTracer, presents the editor, and builds requested font formats locally. A submitted description and/or reference image can use Cloudflare AI to create a low-quality fixed-grid ASCII character sheet; all successful and failed cells remain editable locally.

Automated output is untrusted visual assistance. It does not decide account permissions, charges, or final glyph mappings. Generation is never retried automatically. If you select Generate missing sheets, the description and optional local style reference are sent again only for the missing image; successful sheets are retained. Local character recovery and font rebuilding do not call the image model.

Cloudflare provides application delivery, abuse controls, and the Workers AI binding plus AI Gateway used for the one-shot style-reference request. That call uses the default Gateway with caching and Gateway payload logging disabled. OpenAI processes that one reference through the configured image model. Stripe handles checkout, subscriptions, invoices, refunds, and disputes. Google handles OAuth when you choose Google sign-in. Google Analytics measures site usage and may receive browser, device, approximate location, referrer, page-path, and interaction data and set analytics cookies. Microsoft Clarity provides behavior analytics and session playback; it may receive interaction, performance, and masked page-structure data and set pseudonymous analytics cookies.

The Core service does not store the source reference or generated sheets in R2, D1, Queues, or a server-side processing pipeline; it returns the response directly to the browser.

Original sources and generated sheets are retained only in local browser storage until you clear site data or delete the local Profile. Synchronized Profile metadata and derived artifacts remain until you delete them. Security, ledger, payment, and deletion audit records may be retained longer when necessary for fraud prevention, disputes, accounting, or law.

MakeFont uses private storage, short-lived upload and download authorization, owner checks, secure session cookies, origin validation, file signature and dimension limits, image rewriting, restricted SVG elements, non-root processing containers, rate limits, and signed payment webhooks. No internet service can promise absolute security, so we also limit the data included in logs and processing messages.

You may delete a profile, request account deletion, ask for access or correction, withdraw optional processing by not starting it, and manage a subscription through billing controls. Applicable law may provide additional access, portability, restriction, objection, or complaint rights. Contact support with the account email and a clear request; never send an OTP or password.

Privacy requests can be sent to support@makefont.app. Identity verification may be required before data is disclosed or deleted. This policy will be updated when production processors, retention periods, or product behavior materially change.