TypePOT
Home / Legal / Privacy Policy
PRIVACY BY DESIGN

Website & Desktop Software. Transparent Privacy Standards.

Effective Date: September 30, 2026 · Version 1.3

01 / SCOPE & OVERVIEW

1. Scope & Core Philosophy

This Privacy Policy governs both:

  • The TypePOT Web Platform: Including our official website (typepot.com), user authentication portal, customer dashboard, checkout flows, and support portals.
  • The TypePOT Desktop Software: Including the Windows application, background services, and creative suite host connectors.

TypePOT ("we", "our", or "us") adheres to a strict Privacy-by-Design and Local-First architecture. Your font collection represents valuable creative and commercial property. We ensure your fonts, folder structures, design projects, and typography previews remain strictly on your physical computer. We do not operate cloud font vaults, we do not inspect your typography files, and we never sell user data.

02 / DATA COLLECTION

2. Information We Collect

We collect only the minimum personal data required to administer your account, process orders, and provide technical support:

  • Account Credentials: Your name, email address, and a securely salted and hashed password.
  • Billing & Transaction Records: Country of purchase, postal code, VAT/Tax identifiers (where legally required), and payment processor transaction reference IDs. (Note: We never process, see, or store full credit card numbers; payment data is handled directly by PCI-DSS Level 1 compliant processors).
  • Workstation License Association: An irreversible cryptographic hardware identifier hash, your computer's friendly device name, and the timestamp of the most recent license synchronization.
  • Support Inquiries: Any correspondence or diagnostic logs you voluntarily provide when requesting customer support.
03 / WEBSITE & COOKIES

3. Website Usage, Cookies & Server Logs

When you browse typepot.com or access your user account dashboard, we handle web data in accordance with the following strict standards:

Essential Cookies Only

We use strictly necessary first-party cookies to manage secure sessions (typepot_session), protect against Cross-Site Request Forgery attacks (XSRF-TOKEN), and remember authentication state when you choose "Remember Me".

Zero Advertising & Tracking Pixels

Our website contains no third-party advertising cookies, no retargeting pixels, and no data-broker trackers (such as Facebook Pixel, Google AdSense, or TikTok scripts). Your browsing behavior on our website is never monetized or shared with ad networks.

Web Server Logs & Edge Security

Our edge infrastructure (powered by Cloudflare) automatically logs standard web request metadata—including IP address, browser user-agent, requesting URL, and timestamps. This information is used strictly to mitigate Distributed Denial of Service (DDoS) attacks, enforce rate limits against automated brute-force login attempts, and ensure platform availability.

04 / ZERO TELEMETRY

4. What We Never Collect

Guaranteed Zero Telemetry on Creative Assets:

NO Font File Uploads Your .ttf, .otf, .woff, and .woff2 files are parsed exclusively via local DirectWrite and FreeType engines on your PC.
NO Creative File Inspection Connectors for Adobe Illustrator, Photoshop, InDesign, and Affinity communicate over local Windows IPC sockets. Project files are never scanned or sent to the cloud.
NO Keystroke or Preview Tracking Any sample text you type into the preview bar or glyph inspection grid is rendered purely in local GPU memory.
NO Analytics Trackers in Desktop TypePOT does not bundle Google Analytics, Mixpanel, or third-party behavioral telemetry SDKs inside the desktop executable.
05 / HARDWARE & ACTIVATION

5. Workstation Association & License Validation

To prevent license piracy and enforce the single-seat workstation rule without requiring invasive always-on DRM, TypePOT uses an irreversible cryptographic hardware hash:

The desktop client generates a one-way cryptographic hash derived from hardware identifiers. This hash cannot be reversed to reveal your physical serial numbers or personal identity, and is used solely to associate an active license slot with your computer.

You have total control over your active workstations. You can release or deactivate a workstation slot anytime through your web dashboard.

06 / NETWORK TRAFFIC

6. Desktop Network Operations

The TypePOT desktop application initiates outbound encrypted HTTPS network connections exclusively for:

  • Authentication & Activation: Transmitting your account credentials or authorization token during initial workstation sign-in.
  • Periodic License Verification: Refreshing your offline license token every 14 days to confirm active license or perpetual status.
  • Software Update Discovery: Checking our release service to notify you when a new stable build or security patch is available.
  • Google Fonts Catalog Exploration: Fetching metadata manifests from Google Fonts CDN when browsing the online catalog tab.

TypePOT does not maintain persistent background websocket telemetry or covert outbound connections.

07 / SUBPROCESSORS

7. Third-Party Service Providers

We partner with reputable infrastructure providers to deliver our web platform and payment operations:

  • Merchant of Record & Payment Gateway (Dodo Payments): Secure transaction and global tax compliance processing. Governed by their independent privacy policy.
  • Cloudflare: Edge security, SSL termination, web application firewall (WAF), and CDN hosting for binary installer downloads.
  • Transactional Email Services: Relaying password reset requests and account verification notices.
08 / RETENTION

8. Data Retention & Account Deletion

We retain your account details and license records for as long as your account remains active, ensuring you can redownload your software and retrieve your perpetual license keys.

You have the absolute right to request the permanent deletion of your account and all associated workstation records by contacting our support team. Upon verification, your account and hardware associations will be permanently purged from our database within 30 calendar days.

09 / LEGAL RIGHTS

9. Your Legal Rights (GDPR & CCPA)

Depending on your geographical location, you hold statutory rights regarding your personal information:

  • The right to access the personal data we hold about you.
  • The right to rectify inaccurate or incomplete profile records.
  • The right to object to or restrict certain data processing.
  • The right to data portability.
  • The right to withdraw consent at any time.
10 / CONTACT

10. Contact & Inquiries

If you have questions, feedback, or data privacy requests regarding this policy, please reach out to our privacy officer:

TypePOT Privacy & Data Protection

Contact Email: [email protected]

Website: https://typepot.com