Your privacy, simply
This is a plain-language draft of how the site handles data. The short version: your drawings, scans, fonts and typed text stay in your browser, and the site has no accounts for visitors.
What we never receive
The handwriting tools run entirely in your browser. Strokes you draw, photos or scans you load, the font files you build and the text you type into the previews are processed on your device and are not transmitted to our servers or to any third party. Images you choose for scanning are read locally and are never uploaded. You can confirm this in your browser's developer tools: during drawing, scanning and exporting you will see no requests that carry your data.
What is saved in your browser
| Where | What | How long |
|---|---|---|
| IndexedDB, database “htf” | Your font projects: strokes, traced shapes, per-letter adjustments, project names and spacing settings. | Until you delete a project or clear this site's data. |
| localStorage “htf-active-project” | The id of the project you were last working on. | Until site data is cleared. |
| IndexedDB, store “signatures” | Signatures you chose to save: a transparent PNG, a name and a date. | Until you delete them or clear this site's data. |
| localStorage “htf-active-font” | Which font the tools should use by default. | Until site data is cleared. |
| localStorage “htf-theme” | Whether you chose the light or dark theme. | Until site data is cleared. |
| localStorage “htf-template-prefs” | Your last template choices: paper, character set, cell size, cells per character. | Until site data is cleared. |
In a private or incognito window some browsers block this storage or erase it when the window closes, which is why the maker shows a warning if saving fails. Use a normal window for real work and export when you are done.
None of this is readable by us. It sits in your browser profile on your device, which is also why it does not follow you to another browser or phone.
What the server sees
Like any website, the host that serves these pages receives the technical details of each request: your IP address, the page you asked for, your browser's user-agent string and a timestamp. The host keeps standard operational logs. The site's fonts are downloaded once when the site is built and served from this domain, so your browser does not contact Google's font servers.
Analytics and counts
The site loads Google Tag Manager, and Google Analytics 4 runs inside it. Google Analytics can set its own cookies and receives page-view data, including location derived from your IP address, under Google's terms. Which tags run inside the container is controlled by the site owner; the intent is to measure traffic to pages, not to follow individuals.
Separately, the tools record anonymous action events such as a font being built, exported or an image being saved. An event carries its type, a success or failure status, a short reason code when something failed, the file format, the method you used (draw, scan or trace) and a glyph count. It never carries the glyphs, the images, the font file or any text you typed.
The site itself sets no cookies for visitors. The owner's admin area uses a sign-in cookie that only applies to the administrator.
Email and the contact form
If you write to hello@handwritingtofont.com, we receive your address and the message and use them to reply. When the on-page contact form is switched on, your message is passed through a form-forwarding service to that same inbox. Nothing you send is used for marketing, and there is no mailing list in this version.
Who else is involved
- Hosting: the site is served from Vercel, which handles the requests described above.
- Google Tag Manager and Google Analytics: traffic measurement and the anonymous action counts, as described above.
- A database for the owner's tools: a MongoDB Atlas database holds the administrator's sign-in, published blog posts and the anonymous event counts. It does not hold visitors' projects.
- A form-forwarding service: only if the contact form is switched on, and only for the message you choose to send.
Your rights
We hold no personal profile about you, so there is nothing to look up or export except any email you sent us. You can ask us to delete an email conversation at any time. If you are in a region with data-protection rights such as access, correction or deletion, you can use them through the contact page, and we will tell you plainly what, if anything, we hold.
Deleting everything
Open the maker and use Delete to remove a project, or clear this site's data in your browser settings to remove all of it, including the saved theme and template choices. Because nothing is copied to a server, that removal is complete. Export any font you want to keep first: once the data is gone, we cannot restore it.
Children and changes
The site has no sign-up and collects no personal profile, so there is no account to create for a child. If this policy changes in a way that affects what is collected, the page will be updated and the change described here. Questions go to the contact page.