AIFontGenAIFontGen

Privacy Policy

What personal data this site collects, why, and who processes it.

Last updated: October 17, 2026

This policy explains what personal data AIFontGen (aifontgenerator.net, "we", "us") collects and how we use it.

What we collect

  • Account details: your name and email address. If you sign in with Google, we also receive your Google profile name, email address, and profile picture.
  • Password: stored only in hashed form by our sign-in system.
  • Sign-in sessions: the IP address and browser information of each signed-in session, used to keep you signed in and protect your account.
  • Sign-up information: the IP address, language, and referral source (the utm_source value of the link you arrived from) recorded when you create an account.
  • Fonts you create: the description or reference image you submit and the font made from it, stored with your account. Reference images are kept in private storage and are not shown to anyone else.
  • Handwriting pages: photos of the handwriting template you upload, and the font made from them, are kept in private storage with your account. They are read only by our own font engine, never sent to an outside service, and not added to the library.
  • Fonts you edit or upload: font files you upload to the Studio and drawings you use to replace a glyph are stored privately with your account and used only to build your own font. They are not shown to anyone else or added to the library.
  • Download counts: to apply the monthly free download limit we store a salted, monthly-changing hash of your account. We do not store your account ID or IP address with downloads.
  • Font Finder: the image you submit is stored privately for a few minutes and deleted as soon as the match is done. To apply the free-try limits we record each try with your account if you are signed in, or otherwise with a salted hash of your IP address that changes every day.

Security checks

Sign-up, password reset, free downloads, font creation, font uploads, copying a library font into the Studio, and Font Finder use Cloudflare Turnstile to tell people from automated traffic. Turnstile processes information about your browser and device under Cloudflare's privacy policy.

Cookies

We use cookies that are needed to keep you signed in and to remember the referral source during sign-up, plus one cookie that stores your analytics choice. We do not use advertising cookies of our own. Microsoft Clarity, described below, also sets cookies, including Microsoft cookies that Microsoft uses for its own purposes.

Google Analytics runs only after you choose "Allow analytics". It then sets its own cookies and receives anonymous usage statistics: pages viewed and product actions such as using the type tester, switching a style, downloading a font, starting a font, saving or opening a font in the Studio, redrawing a glyph or adding languages in the Studio, copying text, downloading a signature image or identifying a font with a free tool, or signing in. The text you type, your files, and your account details are never sent. Google signals and ad personalization are turned off. You can change your choice at any time with the "Analytics choices" button at the bottom of the page; choosing "Only necessary" stops Google Analytics and removes its cookies. That choice does not cover Microsoft Clarity.

Session recordings (Microsoft Clarity)

We use Microsoft Clarity to see how people actually use AIFontGen, so we can find and fix confusing steps and broken features. Clarity runs on every visit without asking first; it does not depend on the "Analytics choices" button.

  • What it records: clicks, taps, scrolling, mouse movement and the content of the pages you view, which we can watch back as a session replay and see as heatmaps, together with your browser, device, screen size and country. Text you type into form fields is always masked before it leaves your browser, and numbers and email addresses shown on a page are masked too. Other text the page shows, such as your account name, the names of your fonts or the words you typed shown back in a font preview, can appear in a recording. Clarity does not receive the files you upload.
  • Pages it does not record: the admin area, password reset, email verification, the sign-in return page, and the account deletion confirmation link. It also does not record anyone signed in as a site administrator. To know that, our server sets a cookie named fg_staff (value 1, no identity) in an administrator's browser and removes it when that browser is no longer signed in as an administrator.
  • Who receives it: Microsoft, which runs Clarity and uses the data it collects as an independent controller, including to provide Microsoft Advertising, under the Microsoft Privacy Statement and the Clarity terms. We use what we see only to improve AIFontGen.
  • Cookies: on aifontgenerator.net, _clck keeps a random Clarity visitor ID for 1 year and _clsk joins your page views into one session for 1 day. From Microsoft's own domains the Clarity script can also set CLID, MUID, ANONCHK, MR and SM; their lifetime is set by Microsoft. Microsoft states that MUID identifies browsers across Microsoft sites for advertising, site analytics and other operational purposes, and that Clarity does not use its advertising cookie ANID, so ANONCHK is always 0. For visitors Microsoft locates in the European Economic Area, the UK or Switzerland, we do not send Clarity a consent signal, so Clarity runs there without these cookies and records each page view separately.
  • How long it is kept: Clarity keeps the data needed to play back a recording for 30 days. Heatmap and click data, and recordings we label or mark as favorites, are kept for 9 months.

To stop Clarity, block cookies and scripts from clarity.ms in your browser or with a content blocker; the site keeps working.

Who processes data for us

  • Cloudflare: hosting, file storage, and security checks.

  • Neon: our database.

  • Microsoft: Microsoft Clarity session recordings and heatmaps on every visit, as described above. Microsoft also uses this data for its own purposes, including Microsoft Advertising.

  • Resend: account emails such as email verification and password reset.

  • Mixfont: makes fonts from your description or reference image, and matches fonts for Font Finder. It receives the description, or a link to the image that expires within an hour, and nothing about your account.

  • APIMart: draws letters for AI redraws and added languages in the Studio, passing the request to Google's Gemini models. It receives the same pictures of your font's letters and optional note as Gemini, and nothing about your account. If it fails, Google's Gemini API draws the letters directly.

  • Google: sign-in, only if you choose to sign in with Google; Google Analytics, only if you allow analytics; the Gemini API, which draws letters when you redraw a glyph with AI or add languages in the Studio. Gemini receives pictures of your font's letters and the optional note you write about the change, and nothing about your account.

  • Waffo Pancake (Waffo.com Limited): our Merchant of Record for payments. You enter your payment details on Waffo Pancake's checkout, and we never receive or store your card number. Waffo Pancake shares with us what we need to add your plan, pass or credits and to handle cancellations and refunds: your email address, the product, amount and currency, order, payment and subscription IDs, billing period dates and payment status. Waffo Pancake's Prompt Sift safety check also reads the descriptions and redraw notes you write, without your name or email address.

  • SeeAPI: when enabled, checks descriptions and uploaded images (reference images and handwriting photos) against content policies before a font is made. It reads an image through a private link that expires within 10 minutes and receives nothing about your account.

We keep a record of each content safety decision with your account; a blocked description is kept with it so we can review the decision. We do not sell your personal data.

How long we keep data

Account details, and the fonts you create with their descriptions and images, are kept while your account exists. Clarity recordings are kept for the periods described above. When you delete your account, we delete it at once with your sign-in methods, credits, handwriting fonts, uploaded fonts, copies and uploaded images. We keep fonts generated from a description or an image, which contain no personal information and are no longer linked to you; records of the jobs that made fonts, without your account, for our cost accounting; and a keyed hash of your email address, which cannot be turned back into the address, so the same address does not receive the free sign-up credits twice. Sign-in sessions expire automatically. Download count hashes change every month and cannot be turned back into an account. Font Finder images are deleted within minutes; the record of each try is kept to enforce the limits.

Your choices

You can update your profile in your account settings, and delete your account in Settings → Security. To access or correct your personal data, email us at support@aifontgenerator.net.

Children

AIFontGen is not directed to children under 13, and we do not knowingly collect their personal data.

Changes

We may update this policy. The date at the top shows the latest version.