This policy explains how GummyType handles information when you use its browser-based text tools and printable worksheet generator. The current service has no accounts, cloud design storage, advertising, payment collection, or marketing email form. It uses Vercel Web Analytics and first-party usage events as described below. First-party events include temporary identifiers that link actions within a browser tab; they are not limited to anonymous aggregate counts.
Browser-only creative processing
The 3D and curved-text generators process the words you type, font choice, size, spacing, color, background, and layout in your browser to create a preview and PNG. The Bubble Text tool converts your words into Unicode characters in your browser, writes a result to your clipboard only when you choose Copy, and draws the selected result to a local canvas when you choose Download PNG. The animated-text tool encodes GIF frames or records its local canvas as a WebM file, while the SVG-text tool assembles an SVG and embeds a font file loaded from this site. The traceable-letter tool creates worksheets in your browser and sends them to your browser's print or download function when you choose that action. The tools do not upload the words you type into them or the generated artwork to GummyType, an image-generation API, or a remote design service.
Creative settings are held temporarily in browser memory. Refreshing or closing the page clears that state, with one exception: a generator link opened from a resource pack stores its preset in the URL, so refreshing re-applies those preset settings. The current service does not save a design history or use local storage for your projects.
A preset URL forms part of a website request and may appear in hosting logs or browser history. Do not put private information in a URL. If you choose to share a file, use a cloud print destination, or upload an output to another service, that destination handles the information under its own terms and privacy practices.
Technical delivery and analytics data
Starting an installable-font ZIP download records a separate font-download event with a fixed font identifier, such as Fredoka. It does not include your typed words and is not counted as a PNG export. A download event indicates that the link was activated, not that the font was saved, installed or used.
When you visit the site, the hosting and network providers that deliver it may process standard request data such as your IP address, browser and device information, requested URL, referrer, and timestamp. This data is used to deliver the site, maintain security, prevent abuse, and diagnose reliability problems.
GummyType uses Vercel Web Analytics to collect aggregated information about page views and site usage, such as the page visited, referrer, approximate location, device type, operating system, and browser. Vercel states that Web Analytics does not collect personal identifiers that track people across websites, does not associate analytics data with an individual or IP address, and does not use cookies. Learn more in Vercel's Web Analytics privacy documentation.
GummyType also records first-party page-view and product-action events. These include when a tool input becomes visible, its first focus or text edit, selection of a built-in example, whether an interactive preview was prepared or failed, PNG export attempts and outcomes, copying generated text, browser worksheet print lifecycle events, and starting a resource-pack download. Events include the action type, tool, a fixed tool-interface category (artwork, text, or worksheet), a broad landing referral category such as direct, Google, Bing, or ChatGPT, an event timestamp, and a sequence number. The normalized hostname of the landing referrer may also be included, but its path, query parameters, and fragment are discarded. Page views include the page path; a page-engagement event records elapsed time when the visitor changes page or leaves. Exact elapsed milliseconds are kept in the 7-day event log, while 90-day aggregate counters use broad duration ranges. Exports and downloads may include the delivery method. Preview failures record only that a failure occurred, not the error message.
Random event and attempt identifiers prevent duplicate counting and link the stages of an action. A random tab-session identifier groups activity within one browser tab and rotates after 30 minutes without tracked activity. It is stored in session storage along with markers that prevent repeated funnel events, which are cleared when that tab session ends; it is not an account or device identifier. Apart from a note you explicitly submit through optional feedback, events do not contain words entered into the generators, generated artwork, clipboard contents, full referrer URL, IP address, or an analytics cookie identifier. Upstash Redis stores daily aggregate event and session counts for 90 days and individual event logs and identifier sets for 7 days. Operator self-tests are marked and stored separately from regular usage.
Choosing Copy PNG writes the generated image to your device's clipboard. The application does not read your clipboard. First-party PNG events distinguish copying from downloading or sharing with a delivery-method label; the image and clipboard contents are not included in those events. Pasting into another application or website is a separate action governed by that service.
We also record when the example gallery becomes visible and when the optional format-feedback panel is opened. When you choose Send feedback or Update feedback, we record your selected category: PNG image, installable font file, copy-and-paste text, or something else. Choosing something else lets you optionally describe your needs in a note of up to 500 characters. This note is sent only when you submit, not as you type, and is kept in the 7-day event log; it is not part of 90-day aggregate counts. Please leave out personal information. You can edit your feedback; the latest accepted choice updates the daily preference total, while earlier submissions and notes remain in the log until expiry. These records use the same temporary tab-session identifier described above; answering is optional and does not change your design.
The site serves its generator fonts and visual assets from the same site. It does not request Google Fonts from a visitor's browser. GummyType does not use technical request data for targeted advertising or user profiling.
On the Chrome generator, first-party events also record which built-in example was loaded, whether its words were first edited, and subsequent PNG export stages. Only the fixed example identifier and a random selection identifier are added; the words you type and your artwork are not collected. Selection identifiers follow the same 7-day log retention above. Per-example daily session counts follow the same 90-day aggregate retention.
Processing purposes and retention
Technical request information is used to deliver the website, protect it from abuse, and investigate reliability problems. Usage analytics serves the separate purpose of understanding visits and tool interactions to improve the service; it is not required to generate artwork in your browser. Analytics currently runs automatically on the production site when you visit a page or use a tracked feature. The site does not currently provide an analytics consent or opt-out control.
The legal basis required for personal-information processing depends on the activity and applicable law. Where necessary technical processing is required to perform our agreement with you or comply with a legal obligation, those grounds apply where recognized by that law. Legitimate interests in website security and reliability are relied on only where applicable law permits that basis. This does not mean that every analytics activity is necessary to provide the service or exempt from consent requirements.
Hosting and security logs are kept only for as long as reasonably necessary for delivery, security, troubleshooting, and legal obligations, according to the production provider's configured retention settings. Vercel Web Analytics data is retained according to the applicable plan and retention settings. GummyType's first-party daily event counters expire after 90 days, and individual event logs expire after 7 days. Data is then deleted or anonymized where supported.
When you contact us
If you email us, we receive your email address and the message, attachments, and other information you choose to send. We use that information to respond, troubleshoot a reported problem, or handle a legal or privacy request. It is not used to subscribe you to marketing emails. Please avoid sending passwords, identity documents, sensitive personal information, or personal information about children unless needed to resolve your request.
Correspondence is handled through the email services used to receive and respond to your message. It is kept for as long as reasonably needed to handle the request, related follow-up, or a legal obligation. Sending a design or screenshot by email is separate from the browser-only processing described above.
Cookies and similar technologies
First-party analytics uses tab session storage as described above. When the site operator explicitly enables self-test mode, a local storage preference remembers that choice in that browser until it is disabled. This preference keeps test activity out of regular analytics and does not track visitors across websites.
The current GummyType application does not set advertising or analytics cookies and does not use browser storage to track you across websites. Vercel Web Analytics operates without cookies and reports aggregate usage rather than tracking visitors across different websites. A production hosting provider may use strictly necessary security or load-balancing technology. This policy will be updated before advertising, accounts, payments, cloud storage, or materially different analytics are enabled.
Sharing and international processing
GummyType does not sell personal information or share it for cross-context behavioral advertising. Technical request data may be handled by hosting, network, and security providers acting to deliver and protect the site. Vercel provides hosting and aggregate web analytics, while Upstash provides server-side storage for the aggregate event counters and individual event logs described above. Information may also be disclosed when required by law. Those providers may process data in countries other than your own; where required, legally recognized transfer safeguards must be used.
Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal information, and to appeal or complain to a privacy regulator. California residents may also have rights to know, delete, correct, limit, opt out, and receive equal service where the applicable law covers the operator. GummyType does not sell or share personal information for targeted advertising.
Because GummyType does not create accounts or upload the words you type into its tools, it may not hold information that can be linked back to you. To make a request about technical data or correspondence, including an objection to processing, contact support@gummytype.com. We may ask for information reasonably needed to verify and locate the request, and will respond within the period required by applicable law. You do not need to create an account to contact us.
Children's privacy
GummyType is intended for general users and adults, including parents, guardians, and teachers who prepare materials for children. The worksheet tool is intended to be operated by an adult; children can use the resulting printed materials without visiting the website or creating an account. Please do not send children's personal information in support messages unless necessary to address a request.
The technical delivery and analytics described above also apply to visits to worksheet pages. Browser-only artwork processing does not mean that a website visit produces no technical data. If you believe a child's personal information has been collected contrary to applicable law, contact support@gummytype.com so the operator can investigate and take the steps required by that law, including deletion where required.
Information security
No website, network transmission, or storage system can be guaranteed completely secure. If a personal-information incident occurs, the operator must take the protective steps and provide the notifications required by applicable law. This statement does not limit your legal rights or the operator's obligations.
Changes and contact
This policy will be updated before any material new data flow beyond those described above is enabled. The updated date at the top will change when the policy changes. Questions or privacy requests can be sent to support@gummytype.com.