Privacy policy

• Images you identify. Stored for about a day. Details below.
• Your feedback on a result, and which match you opened, downloaded or visited.
• Websites you check. We save the domain and the fonts we found, and publish them as a page so the next person gets the answer. We don't record who asked.
• Takedown requests. Your name, email, the font and your message, so we can act and reply.
• Visit counts. Google Analytics counts which pages get visited. Details below.
• Server logs. Our hosts log your IP address, browser, the page address (which includes any search you typed) and the time, to deliver the site and stop attacks. These logs are kept for up to a day.
• If you use our apps: your sign-in, the device check and your purchases. Details below.

That's it. We don't sell any of it or use it for advertising.

Your browser shrinks the image and sends it to us. We keep it in private storage at Cloudflare. Our matching server in Germany reads it while it works on your request and doesn't keep a copy. A PDF stays in your browser: we read it there and send only its font names, page numbers and text sizes. Pages with no real text (scans, outlined lettering) are sent as images, up to 3, and handled like any other image. SVG, AI and EPS files are still in preview: they stay in your browser and you see sample results.

Each result has its own link. Anyone you share it with can see the result, and the image while we still have it. Please don't upload pictures with personal details in them.

• The image is deleted about a day after you upload it.
• The result (the text we read, the matches and any correction you typed) is deleted after 30 days.
• If you rate a result, we keep it and the cropped text lines from your image for up to a year, to test and improve the tool. A crop is only the strip with the words, not the whole picture.

To limit uploads per visitor per hour, we store a scrambled code made from your IP address, your browser and a secret. It changes every day, and we don't store your IP address with your uploads. We keep the same code for a day when you check a website or send a takedown request, to limit those per hour too.

Want it gone sooner? Email hello@fonteezy.io with the link to your result.

The Fonteezy apps for iPhone and Android use the same matching server as the website. You can use them without an account. Signing in gives you more scans a day and lets Pro sync your history.

• Sign-in. Google's Firebase Authentication handles it. Depending on how you sign in, Firebase keeps your Apple or Google account's email address, or your phone number; our server only stores the user ID (an account number) Firebase gives us, not your email address or phone number. Firebase sends the text message for phone sign-in. We don't use your email or phone number for marketing.
• Device check. To stop scripts pretending to be the app, the app proves it's a real copy on a real phone using Apple's App Attest or Google's Play Integrity. We keep a random key for your install and when it was last seen, so your free daily scans are counted per device. So that deleting and reinstalling the app doesn't reset them, the app keeps that key in your phone's secure storage (Keychain on iPhone, Block Store on Android), and we may ask the phone maker's service to remember a single "seen before" mark for your phone: DeviceCheck from Apple on iPhone, and, once Google gives us access, Play Integrity's device recall on Android. That key and mark are your app install's device ID; together they say nothing about you, and we don't collect advertising IDs or any other device identifier.
• Purchases. The App Store or Google Play takes the payment; RevenueCat tells us your purchase history: which plan you have, when it expires, and how many scans you bought. We never see your card details.
• Scans. The app finds text on your phone and sends only the cropped line you pick, not the whole photo, kept and deleted the same way as an image uploaded on the website (above): gone within a day, unless you rate the result, which keeps that crop for up to a year. Your scans are linked to your device, and to your account if you're signed in, so we can count your daily scans and show your history. Pro history shows the last 30 days (up to a year for scans you rated).
• Text recognition on Android. The Android app uses Google's ML Kit to find text on your phone. The photo never leaves your phone for this, but ML Kit sends Google basic diagnostics: your phone model, Android version, app version, how long recognition took and a random ID for your install. Google uses it to keep ML Kit working, under its own terms.
• Search. We don't keep a search history or link searches to you. A search you type passes through our server logs like any other request, which are kept for up to a day.
• Deleting your account. In the app, your history, plan and scan credits are removed within an hour; if you ask by email from our account deletion page, within 7 days. It also deletes your sign-in record at Firebase (the email address or phone number). A subscription keeps running until you cancel it in the App Store or Google Play.

We use Google Analytics to see which pages people visit, so we know what to improve. On your first visit we ask first. Until you click Accept, it sets no cookies and only sends Google a basic page view without cookies. If you accept, it sets cookies that let Google tell repeat visits apart.

• We send the page address without anything after the "?", and the page title.
• We never send your search terms, your uploads, the text we read from them, the link to your result, or a PDF's file name.
• Google sees your IP address and browser, as with any request. Google Analytics doesn't log or store IP addresses.
• We keep Google Analytics data for 2 months, the shortest Google allows. Ad features are off.

Changed your mind? Use Cookie settings at the bottom of any page; Decline also deletes the Google Analytics cookies. Google also has a browser add-on that blocks Google Analytics everywhere. See how Google uses this data.

To stop automated abuse, Cloudflare Turnstile checks that you're a person before each website lookup and takedown request, and after your first few uploads in an hour. Usually you just see "Checking you're a person" for a second; sometimes Cloudflare asks you to tick a box. Cloudflare sees your IP address and some details about your browser for that check. We only get a pass or fail. See Cloudflare's Turnstile privacy addendum.

Google Analytics cookies, only if you click Accept. Your Accept or Decline choice, and your light or dark mode, stay in your browser's storage and never reach us. The only other cookie is a login cookie for our own admin area.

When we don't host a font's file ourselves, your browser loads its preview from Google Fonts, so Google sees your IP address and browser for that request. See Google's privacy policy.

• Vercel hosts the website.
• Google runs Google Analytics, and Firebase Authentication for app sign-in.
• Cloudflare runs our domain, stores font files and your uploaded images, and runs the bot check.
• Neon hosts our database in the United States.
• Hetzner runs our servers in Germany: the one that matches your image, and the one that deletes old uploads and cuts the text-line crops.
• RevenueCat handles app purchases.
• Apple and Google run the app stores and take the payment for app purchases.

So your data may be stored outside your own country.

Under privacy laws such as the GDPR, we rely on:

• our legitimate interest in running the site, keeping it secure and making it better (logs, uploads, results, feedback, lookups, cookieless visit counts);
• your consent, for Google Analytics cookies;
• our contract with you, for app accounts and purchases;
• your request, for takedowns.

You can ask what we hold about you, and ask us to correct or delete it, or to stop using it. Email hello@fonteezy.io. We reply within a month. If you have an app account, delete it in the app or at our account deletion page. The website itself has no accounts, so for anything else tell us what to look for, like your result link or the email you used.

You can also complain to the data protection authority where you live.

Fonteezy isn't for children. We don't knowingly collect anything from anyone under 16.

There are no ads on Fonteezy today. Some ad networks use cookies, so we'll update this page before any ads go live, and the date at the top will change. Store links are covered in the affiliate disclosure.