Privacy

Last updated 3 October 2026

This page explains what Everything Fonts collects when you use the site, the tools, the API, Elara and the marketplace, why we collect it, how long we keep it, and who else sees it. We do not sell personal information.

What we collect

  • Your account. Your name, email address and a hashed password. If you join a workspace, team or foundry, your membership and role in it.
  • Fonts you upload to a tool. The font file, its filename and size, and a record of the job (which tool, when, whether it worked).
  • Elara workspaces. The fonts, licences, projects, releases, tags, comments and files your team adds. That content belongs to your workspace.
  • Purchases and subscriptions. What you bought, when, and its licence. Card payments are handled by Stripe; we never see or store your card number.
  • Messages. What you send through the contact form and the email conversation that follows, including files you attach to an emailed reply and the email's original headers; an enquiry to a designer or foundry; or a report.
  • Technical data. Your IP address and browser details, used to keep the site secure, stop abuse and apply rate limits, and kept in server logs.

Fonts you upload

Uploaded fonts are kept privately. They are never published, offered for download to anyone else, or used to train machine-learning models.

  • The files a tool makes for you (converted fonts, kits, repairs) are kept for 30 days, then deleted.
  • The font you uploaded is kept for up to 180 days, so you can come back to a report or repair it without uploading again. After that the file is deleted and the job record no longer points to it.
  • A font covered by a Font Health Pass you bought, and the repaired copies made from it, are kept without a time limit, so you never lose a file you paid to repair.
  • Each identical file is stored once, however many people upload it.

We keep technical facts measured from fonts (format, glyph count, scripts covered, tables and similar) indefinitely, with no link to who uploaded them. They are used only in aggregate, for example “what share of uploaded fonts are variable”. No font that is not already public is ever named or shown on its own.

Job records and usage statistics

The record of each tool job is kept for 400 days, then deleted. Before that, it is counted into daily totals (for example, conversions per day by format) that contain no account, IP address, file or filename. Those totals are kept indefinitely and help us decide what to build and how much capacity we need.

Messages you send us

When you write to us through the contact form or by email, we keep your name, your email address, what the message is about and its subject, your messages and our replies, files you attach to an email, the original emails, and your account if you were signed in.

  • Your IP address is kept for 30 days to stop abuse, then removed.
  • A conversation is deleted 365 days after it is closed, and junk after 30 days.
  • A conversation we have answered closes itself after 30 days without a reply.
  • A conversation still waiting on us is kept until we have dealt with it.
  • Copies of the emails you send us also stay in our support mailbox, outside the site’s database, until we clear them there.
  • Our staff are emailed your name, the subject and the start of each message when it arrives; those emails stay in their mailboxes until they delete them.
  • If you were signed in, you can read your conversations under My messages.

You can ask us to delete them sooner through the contact form.

How we use it

  • To run the tools, Elara, the API and the marketplace, and to deliver what you bought.
  • To keep accounts secure, prevent abuse and fraud, and enforce rate limits.
  • To answer messages and send the emails the service needs (sign-in, receipts, invitations, notifications).
  • To understand how the site is used, in aggregate, and to improve it.
  • To measure our advertising, through Google Analytics and Google Ads (see below).

Who else sees it

We share information only with services that help us run the site, and only what they need:

  • Stripe processes payments and subscriptions.
  • Cloudflare delivers the site and protects it from attacks; your requests pass through it.
  • Google serves the site’s web fonts (your browser requests them from Google Fonts) and provides Google Analytics and Google Ads.
  • Our email provider sends the site’s emails and receives the email you send to our support address.
  • Foundries and designers receive the enquiries you send them and, when you buy their fonts, the licence details they need.

We may also disclose information when the law requires it.

Cookies and similar storage

  • Necessary: a session cookie that keeps you signed in, and a security token that protects forms. The site works only with these.
  • Preferences: your light or dark theme, stored in your browser.
  • Analytics and advertising: Google Analytics and Google Ads cookies, which measure visits and the effect of our ads.

Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and the information tied to it. Use the contact form. Some records, such as purchase records, may have to be kept for longer where the law requires it. Deleting an account does not delete content that belongs to a workspace other people still use.

Children

Everything Fonts is not meant for children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

Questions about privacy go through the contact form.