Nothing is uploaded unless you save it

Using the tools without an account

Text you type, images you open, SVG files you drop and fonts you upload are processed on your device. The tools have no upload endpoint. Mockups are drawn in your browser too, and so is a cut-out (Cut out asks you to sign in with a free account first; the picture still stays on your device): the wand works on the pixels in your browser, and the Smart tool's model is downloaded from this site to your browser and runs there, so the picture is not sent anywhere. Share links contain your settings in the URL, so if you post one publicly, the text in it is public. Uploaded fonts are kept in memory for the session only.

Each tool remembers what you export in this browser's own storage (IndexedDB) so you can open it or download it again from the History page: the settings, a small preview, and for images and SVG files the original file, kept for your last 12 such exports. This stays on your device. Clear it on the History page or with your browser's site data.

Each export or copy adds one to a daily tally on our server, so we know how much the tools are used. The tally holds the date, the tool, the file format and whether you were signed in, and nothing else: not who you are, not your browser, and nothing about the design or the file. In the same way, the first time in a visit that a tool tells you something is part of a paid plan, a second daily tally gets one more for that feature, holding the date, the feature, the page and whether you were signed in, and nothing else. And the first time in a visit that a tool shows you something failed (a font that would not load, a file that could not be read, an export that could not be made), a third daily tally gets one more for that kind of failure, holding the date, the kind, the tool and whether you were signed in, and nothing else: never the message, the file or the font. A fourth tally counts how much use comes from people who came back: your browser keeps its own count of visits in its storage and reports only a bucket (first visit, second or third, later) with each export, the first action in a tool per visit, and a design reopened from the "Continue" strip. Once per visit it also counts the first export and the first trial file, and whether the visit started from a template, so we can see which way into the tool ends in a file, and whether you opened the product mockup panel or clicked a button for something not built yet, so we know what to build; the tally holds the date, the kind, the tool, that bucket and whether you were signed in, and nothing else: not the template, the words or the file. When a free account's trial files are used up, the prompt asks once why not a paid plan; if you click an answer, a fifth tally gets one more for that answer, holding the date, the answer, the kind of file you were making and whether you were signed in, and nothing else. "Something else" opens the feedback form, which sends only what you write and choose to send.

Without an account, exports and share links are counted: the first 20 need no account, and after that a free account has no limit on them. To count them without knowing who you are, we keep a keyed hash of the IP address they come from (not the address, and it cannot be turned back into one without our key), the count and the day of the first one. The count does not expire, so the record is kept; write to [email protected] to have it deleted. Signed in, the address is not counted; a free account instead keeps a count of the trial files it has made (the files the free plan does not include, see the pricing page), a number and nothing about the files. Your IP address itself is never stored.

Fonts from the Google Fonts catalogue are downloaded from fonts.gstatic.com when you pick them, so Google sees that request the same way it does on any site using Google Fonts. The six bundled fonts never leave this domain.

If you create an account

An account is optional on the free plan and required before buying a paid plan. We store:

• Your email address, used as your account name and to send verification links, sign-in links, receipts and renewal reminders, and now and then a short question from us about how the tools are working for you, which you can ignore. If you tick the box for it at sign-up or on the account page, also a short note when new templates come out, about once a month; we record when you ticked it, and unticking it on the account page stops the notes. No other marketing email.
• How you sign in. An email link, Google, or a password if you set one. If you use Google we store the account identifier Google gives us so we can recognise you next time. We never receive your Google password, and we ask Google only for your email address, not your contacts or files.
• A password, only if you choose to set one. It is stored as a slow one-way hash (PBKDF2-SHA256), never as text, so it cannot be read back out of our database.
• When you accepted the terms, recorded at registration.
• Subscription status and a Stripe customer reference. Card details go to Stripe directly; we never see them.
• Sessions: a random token per signed-in device, stored hashed, with the sign-in time and a coarse device label so you can review and end sessions.
• Export history, so your exports follow you to other devices: your last 20 on Free, 200 on Plus, 1,000 on Pro. For text designs this is the text, font, warp settings and a small preview image. For images and SVG files it is only the warp settings and a fingerprint (hash) that tells the files apart; the file itself, its name and any preview of it are never uploaded. You can turn this off, delete single entries or clear it all on the History page.
• What you choose to save: cloud designs, font library metadata (font name and licence note; the font file itself stays in your browser) and, on Pro, API keys stored hashed and usage counts.
• Short links, only when you make one: the design's text and settings (what the long share link carries), its outlines and a preview picture. Anyone who has the link can see the design, and chat apps fetch the picture to show it. Short links are for text designs only; image and SVG files are never uploaded. Delete a link on your account page and its page stops working within a minute.
• Consent records: the time you agreed to immediate access and the no-refund policy at checkout.
• Checkout attempts: each time you press a Subscribe or file-pack button while signed in, the plan or pack and billing period you picked, the payment methods Stripe offered, and whether the payment went through, was abandoned or was refused, with the times. Not the card or any other payment details.

None of this is sold, and none of it is handed to an advertiser.

This data is processed to provide the service you asked for (contract) and, for payments, to meet tax and accounting rules (legal obligation). It is kept while the account exists and, for billing records, for the period tax law requires afterwards. Verification and sign-in links expire after 15 minutes; sessions after 90 days. An account that is never verified holds nothing and is deleted automatically.

If you send feedback

The feedback button stores your message, the type you picked, the address of the page you sent it from (including the settings in its link), a coarse browser label such as "Chrome on macOS", your plan, and an email address if you give one or are signed in. The IP address is used only to limit how often messages can be sent and is not stored with the message. Messages from visitors who are not signed in pass the same Turnstile bot check as registration. Feedback is used only to fix and improve the site and to reply to you (if you asked from a button marked "soon", that reply is one message when the feature is ready), and is deleted when it is no longer useful or when you ask. Closing your account deletes the feedback you sent while signed in.

Who processes data for us

• Cloudflare hosts the site, runs its functions and database, serves fonts and provides the Turnstile bot check on sign-in.
• Stripe processes payments, tax calculation and the billing portal.
• Cloudflare Email Service delivers verification, sign-in and billing emails.
• Google, only if you choose to sign in with Google, which tells Google that you signed in here.
• Google Fonts serves catalogue fonts, as described above.
• Google AdSense serves the ads on the guide and preset pages, as described below.
• Microsoft Clarity records how pages are used, as described below.

Each acts under a data processing agreement. We do not sell data and do not share it with anyone else.

Analytics, ads and cookies

We use privacy-preserving, cookie-free analytics to count page views. Signed-in sessions use a functional token that is necessary for the service.

We also use Microsoft Clarity to see how the pages and tools are actually used: where people click, how far they scroll, and a replay of that movement through the page. What Clarity collects is covered by theMicrosoft privacy statement. A replay is rebuilt from the layout of the page, not a video of your screen: text you type is masked before it leaves your browser, and the images, SVGs and fonts you open in a tool are never sent to Clarity — they stay on your device.

In the European Economic Area, the United Kingdom and Switzerland, Clarity sets no cookie unless you have agreed to one. Without that agreement it starts again from nothing on every page, so it cannot follow you from one page to the next or recognise you on a later visit. Your answer to the ad consent message below is the answer it uses; if you take it back, Clarity deletes the cookie it had and goes back to counting you as a stranger. Where that message never appears — inside the warpers, on the pages you use while signed in, and everywhere on a paid plan — Clarity is never asked to set a cookie in the first place. Outside those countries it sets one, and the paragraph above is what it is used for. Clarity data is never passed to Microsoft Advertising.

The guide and preset pages carry Google AdSense. To choose and measure an ad, Google may store a cookie or read a similar identifier in your browser; what Google collects that way is covered by its own privacy policy, and you can change what it uses at My Ad Center. We never pass Google your email address, your designs, or anything you type or open in a tool.

No ad is placed inside the text, image or SVG warper, or on the developer generators, or on the pages you use while signed in. On a paid plan the ad script is not requested on any page at all: your browser decides before it loads, so nothing is fetched from Google to begin with.

In the European Economic Area, the United Kingdom and Switzerland, Google asks before any of that happens: the first page with ads shows its consent message, and you can say no. It is one question for both: the answer also decides whether Clarity may keep a cookie. Your answer is yours to change at any time, through thePrivacy and cookie settings link Google puts at the bottom of a page carrying ads, or here:(the button appears on pages where an ad consent message applies to you).

Your rights

Signed-in users can export everything stored about them and delete the account, including all saved designs, from the account panel. You can also ask by email. Under the GDPR, UK GDPR and similar laws you have the right to access, correct, delete and port your data and to complain to your local data protection authority.

Children

The site is not directed at children. You must be 16 or older to use it, and we do not knowingly collect data from anyone younger.

Contact

[email protected]. See also the terms of service.