Privacy Policy
This Privacy Policy explains what personal data Forest Techno LLC ("we", "us") collects when you use WonderFonT at wonderfont.art and fonts.wonderfont.art, why, who we share it with and what choices you have. Forest Techno LLC is the controller of this data.
Contact for privacy questions: privacy@wonderfont.art, or Forest Techno LLC, [COMPANY ADDRESS].
1. The short version
- We collect what we need to sign you in, sell you licenses, deliver fonts and keep the Service safe.
- We do not sell your personal data and we do not use advertising trackers or third party analytics on WonderFonT.
- Text you type into a font tester stays on your screen. We do not record it.
- Payments are handled by Stripe. We never see or store your full card number.
2. What we collect
Information you give us
- Account: your email address, and your name if you add it.
- Workspace: Workspace name, the team members you invite (their email addresses), their roles, and the company email domain you verify.
- Billing: billing name, country, address and tax details you give at checkout. Card details go directly to Stripe.
- Websites: the website addresses you register and the verification records for them.
- Messages: what you write to us by email, and any files you attach.
- Affiliates: if you join the affiliate program, the details needed to pay you commissions.
Information created when you use the Service
- Orders and licenses: what you bought, when, at what price, the license version you accepted, seat and site assignments, and downloads of font files.
- Usage events: pages and actions on the Service (for example, a family page viewed or a checkout started), linked to a random visitor identifier stored in a cookie. We use this first party data to understand how the store is used. We do not share it with advertising networks.
- Web font delivery: when a website serves our Hosted Web Fonts, our servers receive the requesting website's address, the visitor's IP address and browser details, as any web server does. We use this to check that the website is licensed, to measure delivery and to prevent misuse. We do not use it to identify or profile the visitors of your website.
- Technical logs: IP address, browser type, the page requested and the time, kept for security and troubleshooting.
- Referrals: if you arrive through an affiliate link, the referral is recorded so the affiliate can be credited.
3. Why we use it (and our legal bases)
| Purpose | Legal basis (EU/UK) |
|---|---|
| Creating your account and signing you in | Performance of our contract with you |
| Processing orders, issuing licenses, delivering and serving fonts | Performance of contract |
| Billing, invoices, tax and accounting records | Legal obligation |
| Emails about your account, orders, renewals, grace periods and transfers | Performance of contract |
| Security, fraud and abuse prevention, enforcing our licenses | Legitimate interests |
| Understanding how the store is used and improving it | Legitimate interests |
| Crediting affiliates | Legitimate interests, and contract with the affiliate |
| Answering your messages | Legitimate interests, or contract |
We do not send marketing email without your consent, and every marketing email lets you unsubscribe. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Cookies and local storage
We use only cookies that the Service needs, plus one first party measurement cookie. We do not use advertising or cross-site tracking cookies.
| Name | Purpose | Duration |
|---|---|---|
__Host-psn_id | Keeps you signed in | 30 days, or until you sign out |
__Host-wf_ws | Remembers the Workspace you are working in | 30 days |
wf_lang | Remembers the language you read the site in | 1 year |
wf_v | Random visitor identifier for first party usage statistics | 1 year |
__Host-wf_aff | Records an affiliate referral, only if you arrived through an affiliate link | 30 days |
wf_transfer | Holds a site transfer invitation while you accept it | 7 days |
The accessibility settings and the "pause motion" choice are stored in your browser's local storage, only on your device, and are never sent to us.
5. Who we share data with
We share personal data only with service providers that help us run WonderFonT, under contracts that require them to protect it, and only as far as they need it:
| Provider | What they do | Where |
|---|---|---|
| Stripe | Payments, invoices, subscription billing, fraud checks | United States and other countries |
| Amazon Web Services (Amazon SES) | Sending sign-in links and account emails | United States |
| Hetzner Online | Hosting our servers and database | European Union |
| Cloudflare | Domain name service and email forwarding | Global |
| Google Fonts | Serves the typeface used in our interface; your browser requests it from Google, which receives your IP address | Global |
We may also disclose data when the law requires it, to protect our rights or the safety of others, or to a buyer of our business, who will be bound by this policy. We do not sell or rent personal data, and we do not "share" it for cross-context behavioral advertising.
6. International transfers
We are a US company and our providers operate in several countries. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
7. How long we keep data
- Account and Workspace data: while your account is open, and up to 12 months after it is closed.
- Orders, invoices and license records: for as long as the license may be used and at least 7 years, because we must keep financial records and because your license record proves your rights.
- Usage events and technical logs: up to 24 months, then deleted or made anonymous.
- Emails you send us: up to 3 years after the conversation ends.
8. Your rights
Depending on where you live, you may have the right to access your personal data, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent. Residents of California and other US states have the right to know, delete and correct personal data and not to be discriminated against for using these rights. Residents of Israel have the right to review and correct their data under the Protection of Privacy Law.
To use any of these rights, email privacy@wonderfont.art from the address on your account. We will answer within 30 days. We may need to confirm your identity first. We may keep data we are legally required to keep, such as invoices and license records.
If you are in the EU or UK, you may also complain to your local data protection authority.
9. Security
We use encryption in transit (HTTPS), sign-in links that expire, restricted access to production systems, and separation between customer Workspaces. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
10. Children
WonderFonT is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, write to privacy@wonderfont.art and we will delete it.
11. Changes
We may update this policy. We will post the new version here with a new date and, for material changes, tell account holders by email before the change takes effect.