Privacy Policy

The Short Version

Your fonts never leave your device. The stencil engine runs inside your web browser: your font is read, bridged and saved on your own computer or phone, and is never uploaded to us or to anyone else. There are no accounts and no cookies. Like any website, our host sees your IP address when your browser loads a page, and we keep anonymous statistics: page visits, and the time and country of each completed conversion.

Who We Are

Bridge My Font (bridgemyfont.com) is run by Cameron Cox, who is responsible for this site's use of personal data (the “controller” under UK data protection law). Contact: support@bridgemyfont.com.

How Your Fonts Are Processed

1. When you open the site, your browser downloads the page from our host, like any other website
2. When you choose a font file (.ttf or .otf) on your device, your browser also downloads the stencil engine (a WebAssembly program) from our host, unless it already has a copy. The Showcase page may also download it, to draw its example letters when it has no ready-made pictures sized for your screen
3. Your browser reads the file and hands it to the engine, which runs on your device
4. The engine adds the stencil bridges and builds the new font, still on your device
5. You save the result with your browser's ordinary download

At no point is the font, its file name, its glyph outlines, the name you give the stencil version, or the converted font sent over the network.

What We Collect

• Your font files: Nothing. They are processed on your device and never reach us
• Conversion statistics: When a conversion finishes, your browser sends an empty request to our server. For each one we record when it happened and the country it came from, which our host works out from your IP address as the request arrives. We don't read or store your IP address, the record contains nothing about you, your device or your font, and we don't try to link these records to anyone. We keep them, with no set time limit, to see how much the site is used, and where
• Page visits: We use Vercel Web Analytics to count visits to our pages. For each visit it records the time, the page address, the referring site, your approximate location (country, region and city, worked out from your IP address), and your device type, operating system and browser. It doesn't use cookies or store your IP address; it tells visits apart with a code made from the request, which Vercel discards after 24 hours. We only see totals, which Vercel keeps for the period its Web Analytics service sets for our plan
• Emails: If you email us, we receive your email address and message and use them only to reply. Our address forwards through Cloudflare's email routing service to a Gmail inbox, so Cloudflare and Google also handle your email, possibly outside the UK. We keep emails only as long as we need them to deal with your message
• No accounts or forms: We don't ask for your name, email address or any other details

Why We Use This Data

We count visits and conversions (with their time and country), our host keeps request logs, and we read emails you send us, so we can run the site, keep it secure, reply to you and see how much, and where, the site is used. Our lawful basis under UK GDPR is our legitimate interest in doing those things. We collect only what they need, and none of it is used to identify you, profile you or show you adverts.

Saved in Your Browser

After a conversion, the site saves the converted font and its previews in your browser's own storage (IndexedDB), so they're still there if you leave the page and come back. This is part of the service you asked for, stays on your device and is never sent to us. It's removed when you click "Process another font", or when you clear this site's data in your browser. The site sets no cookies, and apart from the page-visit counting described above, it doesn't track you.

Hosting and Request Logs

The website and its conversion counter are hosted by Vercel Inc., which processes data for us under its data processing agreement. Vercel automatically keeps request logs for a limited period set by its own retention policy: your IP address, the time, which page or file was requested, and your browser type. These cover loading the site and the conversion count request; they never include your fonts. Vercel's firewall also uses your IP address, briefly, to limit how many conversions one address can count, which makes fake counts harder. Vercel may process this data in the United States and other countries, with the safeguards for international transfers that UK law requires. See Vercel's privacy policy.

Your Rights

Under UK data protection law you can ask for a copy of personal data held about you, ask for it to be corrected or deleted, ask us to limit how it's used, or object to its use. Unless you've emailed us, we hold nothing that identifies you: otherwise the only personal data involved is what our host handles briefly, as described above (its request logs, and your IP address while it works out your location, tells visits apart and limits counting). To ask a question or make a request, contact support@bridgemyfont.com. If you're unhappy with how we handle data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to This Policy

If we make material changes to how we handle data, we'll update this policy and the date above. See also our Terms of Use.