Privacy and data use

Who is responsible for the data?

Fonts2u.com is responsible for the data processing described on this page. For privacy questions or requests, use our contact form and clearly write “Privacy request” in the subject.

Open the contact form

Information we process

• Account data: your email address, password hash, optional profile details, linked Google identity, account settings, collections and favourites.
• Content you provide: font submissions, licence choices, author notes, showcase images, supporting files and messages you send through the contact form.
• Security and technical data: session and anti-forgery tokens, request metadata, diagnostic logs and reCAPTCHA verification needed to protect forms and services from abuse.
• Uploaded font files are processed temporarily by file-based tools, including previews and comparisons. Font identification sends the sample text and derived letter and word shapes for matching; the original image stays in your browser. The font tester processes the text you enter to render previews.

Why we use this information

• To provide requested features, downloads, accounts, collections, submissions and support.
• To authenticate users, prevent fraud and automated abuse, diagnose failures and keep the service reliable.
• To administer font licences and submissions, maintain necessary records, enforce our terms and comply with legal obligations.
• To fund the service with advertising. Depending on your region and choices, ads may be contextual or personalised.

The legal basis depends on the feature and jurisdiction. It may be performance of a service you requested, our legitimate interest in operating and securing Fonts2u, compliance with law, or consent where consent is required. You may withdraw consent through the available privacy controls without affecting earlier lawful processing.

Cookies and browser storage

Fonts2u uses essential cookies for anti-forgery protection, sign-in sessions and short-lived Google sign-in state. A signed-in session can last up to 365 days; Google sign-in state expires after about 10 minutes. Session storage may temporarily remember text or font comparisons while you move between relevant tool pages.

Google AdSense may use cookies or similar technologies to deliver, measure and limit the repetition of ads. Google and its partners may use prior visits to this and other sites for personalised advertising where permitted. Non-personalised ads can still use storage for frequency capping and aggregated reporting.

You can use the privacy controls shown on the site where available, change browser storage settings, or manage ad personalisation in Google’s Ad Settings. Blocking essential cookies can prevent sign-in and protected forms from working. Google Ad Settings.

Service providers and data transfers

We do not sell your account details or uploaded tool files. Data is disclosed only when needed to operate the service, for example to hosting and email providers, Google for sign-in, reCAPTCHA and advertising, professional advisers, or authorities where legally required. These providers may process data in other countries under their own terms and applicable transfer safeguards.

How long information is kept

Account and collection data is kept while your account is active and as needed to provide the service or meet legal obligations. Expired authentication attempts and revoked sessions are removed according to operational retention rules.

Temporary font-tool files and previews expire automatically, normally about 15 minutes after a result is ready. Failed jobs expire sooner. Where a tool offers a clear or delete action, you can request earlier deletion. Original font-identifier images stay in your browser.

Approved font catalogue content and its provenance may be retained for publication, integrity and licence records. Contact messages, diagnostics and rejected or withdrawn submissions are kept only as long as reasonably needed for their purpose, security, disputes and legal obligations.

Security

We use technical and organisational safeguards appropriate to the service, including hashed passwords and account tokens, opaque server-side sessions, access controls, upload validation, private temporary storage and automatic deletion for tool jobs. No internet service can guarantee absolute security, so please use a unique password and do not upload files you are not authorised to process.

Your choices and rights

Depending on where you live, you may ask for access to, correction of, deletion of, restriction of or a portable copy of your personal data, and you may object to certain processing or withdraw consent. You may also complain to your local data protection authority. We may need to verify your identity before completing a request, and some rights have legal exceptions.

Send a privacy request through the contact form. Include the email address connected to your account, but never send us your password. Open the contact form.

Changes to this notice

We may update this notice when the service, providers or legal requirements change. The date above identifies the current version.