Privacy policy

Nothing third-party. No Google Analytics, no Plausible, no PostHog, no Segment, no Meta or LinkedIn pixel, no session recorder, no chat widget, no advertising tag. You can confirm this in your browser’s network panel: every request the site makes is to the site’s own domain.

Typefaces are compiled into the site at build time through Next’s font pipeline and served from our own domain, so loading a page does not call Google Fonts either.

This site sets no cookies and writes nothing to local storage. Not one entry — you can open the storage panel in your browser’s dev tools on any page here and find it empty.

No consent banner appears because there is nothing to consent to. A banner is required when a site stores or reads data that is not strictly necessary; a site that stores nothing at all has no such disclosure to make, and putting a banner up anyway would be theatre.

The download endpoint counts requests per IP address, in memory, to stop a script pulling the whole library on a loop. That counter holds an address and a number for ten minutes and is then discarded. It is never written to disk, never joined to anything else, and sets nothing in your browser.

There is no newsletter running at the moment, so there is nothing to subscribe to and no address being collected anywhere on this site.

When one opens, the form will post your email address and nothing else to a third-party mailing provider, and that will be the only request this site makes off its own domain. Your address would be used to send the newsletter and for nothing else — never sold, rented or included in a shared list — with a one-click unsubscribe on every issue that deletes the record rather than flagging it. This page will name the provider before that happens.

Our host keeps standard request logs — IP address, timestamp, path, user agent — for a short operational window, in order to serve traffic and diagnose failures. We do not build profiles from them, join them to anything else, or use them for analytics.

There are no accounts, so there is no name, password or profile. There is no telemetry on which templates you view or download. Prompt text you copy is copied in your browser and never reported back. Nothing you type into a live demo leaves your machine — the demos are static pages with no backend.

If you are in the UK, EEA or California, you have the right to ask what data is held about you, to have it corrected, to have it deleted, and to object to its processing. Given the above, there is currently no record to hand over: no accounts, no mailing list, and nothing in server logs that is joined to a person.

Email us and we will action it. There is no form to fill in and no identity-verification hoop, because there is nothing sensitive enough to justify one.

If the site starts collecting something it does not collect today — accounts, analytics, a payment processor — this page changes before that ships, not after, and the date at the side moves with it.