Privacy Policy

What we collect

Account data: email address, display name, and a salted hash of your password (never the password itself). Google sign-in shares your verified email and name; we store no Google tokens.

Usage data: icons you view, save and download, submissions you make, and purchase status. Aggregate view/download/save counters are public per icon.

Technical data: IP addresses are used transiently for rate limiting and are not stored in the database.

How we use it

To operate accounts, enforce download limits, calculate creator pool earnings, moderate submissions, and show you your saved icons and history.

We do not sell personal data and we do not use third-party advertising trackers. We use Google Analytics to understand aggregate site usage — see Third parties and Cookies below.

Third parties

Payments are processed by our merchant of record (e.g., Lemon Squeezy); we receive order status and your email, never card numbers.

Google sign-in is processed by Google under its own privacy policy.

We use Google Analytics 4 to measure aggregate traffic and feature usage (pages visited, referral source, approximate region, device type). Analytics data is pseudonymous — we do not send your email, name or account contents to Google Analytics. Google processes this data under its own privacy policy; see how Google uses data at policies.google.com/technologies/partner-sites.

If AI image generation is enabled, the generation prompt (not your personal data) is sent to the model provider.

Cookies

We set one essential session cookie (httpOnly) to keep you signed in, and a short-lived cookie during Google sign-in.

Google Analytics sets its own cookies (e.g. _ga) to distinguish visitors for aggregate statistics. You can block these with browser settings or the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout) — the site works fully without them.

Retention & your rights

Account data is kept while your account exists. You may request access, correction, or deletion of your data at 【CONTACT EMAIL】; deletion removes your account, saves, history and unpublished submissions. Published icons already licensed to users may be de-listed but existing licenses survive.

Contact

Data controller: 【OPERATOR / COMPANY NAME】, 【CONTACT EMAIL】. Last updated: 【DATE】.