FontKit

FontKit Privacy Policy

Last updated: May 26, 2026.

This policy describes how personal data of users who visit or use the FontKit website is collected, used, stored, and protected. FontKit is a platform that allows users to explore Google Fonts, preview typefaces, generate HTML and CSS snippets, and organize their favorite fonts into private collections.

Data controller

The data controller responsible for processing personal data collected through this website is:

  • Controller: FontKit
  • Contact email: fontkit@hotmail.com

Types of data processed

FontKit may process different categories of personal data depending on how the site and its services are used.

Data provided by the user

When a user signs in via Google authentication, the site may receive profile data required for registration or authentication, such as name, email address, account identifier, and profile picture.

When a user creates collections, assigns tags, or generates shareable links, the data and content produced within the service is also processed.

Usage data and technical data

During browsing, technical data may be collected such as IP address, user agent, browser type, operating system, language, request timestamps, and data related to the use of site features, for security, maintenance, and service operation purposes.

Cookies and similar technologies

The site uses cookies and similar technologies. A detailed description of each category — including their purpose, legal basis, and how to manage or withdraw consent — is available in the Cookie Policy.

Google authentication and some Firebase flows depend on browser cookies functioning correctly. In some cases, blocking third-party cookies may prevent login or alter its behavior.

Purposes of processing

Personal data may be processed for the following purposes:

  • enabling registration, login, and account management via Google;
  • providing the service features, including font collection management, snippet generation, and link-based sharing;
  • ensuring security, abuse prevention, incident management, and infrastructure protection;
  • complying with legal obligations and responding to requests from competent authorities;
  • measuring and improving site performance through aggregated and anonymized analytics data, only when the user has given explicit consent to statistical cookies (see Cookie Policy).

Legal basis for processing

Processing is carried out on the following legal bases:

  • Contract performance: to provide the service and its features to authenticated users;
  • Legitimate interest: for security, fraud prevention, and infrastructure protection;
  • Legal obligation: to comply with applicable law and respond to lawful requests from authorities;
  • Consent: for optional analytics cookies (Google Analytics 4) and any other non-essential tracking, where a specific consent mechanism is implemented. Consent may be withdrawn at any time through the cookie preference center.

Data sharing and third parties

Personal data will not be sold or transferred to third parties for commercial purposes. Data may be shared with:

  • Google / Firebase: for authentication, cloud data storage, and hosting infrastructure;
  • Google Analytics 4 (Google LLC): only when the user has consented to statistical cookies, for aggregated and anonymized website usage analysis. IP anonymization is enabled. Google may transfer data to servers in the United States under standard contractual clauses. See Google's Privacy Policy.
  • Competent authorities: where required by law or judicial order.

Third-party service providers act as data processors and are bound by their own privacy policies and applicable data protection law.

International data transfers

Some service providers (including Google, Firebase, and Google Analytics) may process data in countries outside the European Economic Area, in particular the United States. In such cases, transfers are carried out with appropriate safeguards as required by applicable data protection law (e.g., standard contractual clauses, adequacy decisions).

Data retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Authentication data is retained for as long as the account is active. Analytics data processed by Google Analytics 4 is subject to the retention period configured in the GA4 property settings (default: 14 months).

User rights

Where applicable data protection law grants them, users have the following rights regarding their personal

  • Access: the right to obtain confirmation of whether personal data is being processed and to receive a copy;
  • Rectification: the right to request correction of inaccurate or incomplete data;
  • Erasure: the right to request deletion of data, subject to legal retention obligations;
  • Restriction: the right to request that processing be limited in specific circumstances;
  • Portability: the right to receive data in a structured, machine-readable format;
  • Objection: the right to object to processing based on legitimate interest;
  • Withdrawal of consent: where processing is based on consent (e.g., analytics cookies), the right to withdraw it at any time via the cookie preference center, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at the address listed in the Data Controller section. You also have the right to lodge a complaint with the competent supervisory authority (in Italy: the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

Security

FontKit implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. However, no system is completely immune to risk, and FontKit cannot guarantee absolute security of transmitted data.

Minors

The service is not directed at children under 16 years of age. FontKit does not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without appropriate parental consent, we will take steps to delete that data.

Updates to this policy

This Privacy Policy may be updated from time to time to reflect changes to the service, applicable law, or our data practices. Material changes will be communicated through appropriate notice on the site. Continued use of the service after the updated policy takes effect constitutes acceptance of the changes.

Contact

For any questions, requests, or complaints regarding this Privacy Policy or the processing of personal data, please contact us at: fontkit@hotmail.com.