This Privacy Policy explains what personal data AutoFitShapes ("we", "us") collects, how we use it, and your choices. By creating an account or using the Service, you consent to this policy.
| Data | Why |
|---|---|
| Email address | Account identity and email verification. |
| Password (stored as a salted hash only) | Authentication. We never see your plain password. |
| Optional full name | Display name on your account. |
| Email-verification and password-reset tokens | One-time links sent to your email; expire after use. |
| Session token (in an httpOnly cookie) | Keeps you signed in. The cookie is not readable by JavaScript. |
| IP address and user agent | Session security and abuse prevention. |
| Your designs and layout data | To save and load your cloud designs, scoped to your account. |
| Subscription records | To unlock paid features. Payment card data is handled by our payment provider (Lemonsqueezy), not by us. |
We do not sell your personal data. We do not use your designs for advertising or for training any model.
The Service uses a single httpOnly session cookie to keep you signed in. It is not used for cross-site tracking and is not accessible to JavaScript in the page. No advertising or third-party tracking cookies are set.
Paid features are sold through Lemonsqueezy. We receive only the order, checkout, and subscription identifiers needed to grant entitlement. Your card number and other payment details are handled by Lemonsqueezy and are never stored on our servers.
Depending on your region (e.g., GDPR/UK GDPR, CCPA), you may have rights to access, correct, export, or delete your personal data, or to object to processing. To exercise these rights, contact us at the address below.
Passwords are stored only as salted hashes. Sessions use unpredictable tokens in httpOnly cookies. Access to designs is scoped per owner account. No system is perfectly secure, but we apply reasonable technical and organizational measures.
The Service is not directed to children under 16 (or the applicable age of digital consent). We do not knowingly collect data from children. If you believe a child has registered, contact us to remove the account.
Your data may be processed on servers or by providers outside your country. Where required, we rely on appropriate safeguards for such transfers.
We may update this Privacy Policy. Material changes will be communicated via the Service or email. Continued use after changes constitutes acceptance.
For privacy questions or requests, contact: [email protected].
← Back to AutoFitShapes