Last updated: 28 October 2026 Effective: 28 October 2026
This policy applies to the KerfPress website (https://kerfpress.com) and the services offered through it.
1. Who handles your information
KerfPress is the trading name of an individual software studio that is not registered as a separate legal entity. It is run by an independent developer, who is the data controller for the personal information processed here. “KerfPress”, “we” and “our” mean that individual developer operating under the KerfPress name, not an incorporated company.
For privacy questions and data rights requests, write to [email protected].
2. Your images and your work
Standard generation, the editor and the 3D preview run entirely in your browser. The images you use there are not uploaded to our servers. What you have open in the editor is stored only in your own browser, where we cannot read it.
AI generate is optional and only runs when you click it. The image you chose is then sent through our server to Recraft, which turns it into a vector file and sends it back to your browser. Our server passes the image on without saving it, and does not keep the result. We never use your images to train models, serve advertising or build a profile of you. Recraft handles the image under its own terms and privacy policy (see Section 5).
If more of the processing ever moves to a server, we will update this policy before it happens, and the same rules will apply: the image is used only to complete that request and is not kept.
3. What we may collect
- Account details, such as your email address, a user ID and whether you are signed in;
- Purchase and entitlement status, such as plan, order number, payment status and refunds, plus the reference the payment provider uses for your account so that you can open its portal and manage or cancel your subscription; we do not store full card numbers;
- Service logs, such as IP address, browser and device type, time of access, errors and security events;
- Anything you send us when you contact support or use the Contact form, including the email address you leave there;
- Your points balance and a record of points added and spent (amount, reason and time), so we can show your balance and return points when an AI request fails;
- Recovery data, preferences and sign-in state kept locally in your browser.
Accounts use an email address and a password. Passwords are stored only in an irreversible hashed form, so we never see the original. We do not currently use any third-party analytics, advertising or behavior-tracking service.
4. How we use it
- To provide sign-in, generation, editing, preview and download;
- To confirm free allowances, purchases and download entitlements;
- To process payments, refunds and support requests;
- To keep the service secure, diagnose faults and prevent abuse;
- To understand which pages and templates are viewed, using only our own service logs, so we can improve the site;
- To send occasional emails about your account and product updates, such as new features or points added to your account. Each one has an unsubscribe link, and unsubscribing does not stop sign-in, receipt or other account emails;
- To meet applicable legal, tax and accounting obligations.
We do not sell personal information, and we do not share it for third-party targeted advertising.
5. Service providers and cross-border processing
To run the service we pass necessary information to a few categories of provider: hosting and network access, email delivery and payments and subscriptions. They process information only as needed to provide their own service, are bound by their own terms, and may not use it for their own purposes.
Fonts are self-hosted and are no longer loaded from a third-party font service, so visiting this site does not send your IP address to a font provider.
The providers currently in use:
- Cloudflare — DNS, site access and forwarding for
[email protected](privacy policy); - Resend — delivery of system, support and product update email (privacy policy);
- Recraft — AI vectorization when you click AI generate. It receives only the image you chose, not your email address or account details (privacy policy);
Accounts and sign-in are handled by our own server. You may also choose Sign in with Google, in which case Google confirms your identity to us (privacy policy). We receive only your email address and the fact that Google has verified it; we do not receive your Google password, and we ask for no access to your Gmail, contacts, files or any other Google data. Signing in with Google is optional: an email address and a password works just as well.
Payments and subscriptions are handled by Dodo Payments, which acts as merchant of record and is the seller on your receipt (privacy policy). It receives the information needed to take the payment — your email address, the amount and what you bought — and handles it under its own privacy policy. Your card details go to it directly: KerfPress never receives or stores your full card number. We keep only the order record and the customer reference it gives us, which is what lets you open its portal from your account page.
Our servers and providers may sit outside the country you live in, so your information may be processed there. This list is updated as providers change; the date at the top of this page is when it was last checked.
6. Cookies and local storage
KerfPress uses only the cookie needed to keep you signed in, plus browser local storage (to remember your preferences and to help you recover work you have not downloaded yet if a tab closes unexpectedly). We use no analytics or advertising cookies, so there is no consent banner.
You can clear your browser data at any time. The cost is that you will be signed out and will lose any editing session you have not downloaded — browser storage is not a backup, and the file you download is the only thing that really keeps your work.
7. How long we keep things
- Source images and created files: not kept at all, including images sent through AI generate;
- Points records: for as long as the account exists;
- Account information: for as long as the account exists, then removed when the account is deleted, except where the law requires us to keep something. We keep a one-way digest of a deleted account's email address. It cannot be turned back into the address, and is used only so that the same address does not receive a second free allowance.
- Orders and payment records: for as long as applicable tax and accounting law requires;
- Sign-in state: up to 90 days, expiring sooner if unused;
- Service and security logs: only for the limited period needed to diagnose faults and prevent abuse.
You can ask us to delete your account at any time by writing to [email protected]; we will verify your identity first. If you have an active subscription, cancel it before requesting deletion.
8. Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete personal information, to withdraw consent, or to object to or restrict certain processing. Send requests to [email protected]. We may need to verify your identity.
If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the rights given by the General Data Protection Regulation (GDPR) and equivalent law, including access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to complain to the data protection authority in your country.
If you are a California resident, you have the rights given by the California Consumer Privacy Act (CCPA/CPRA) to know, delete and correct personal information, and to opt out of its sale or sharing — we neither sell personal information nor share it for targeted advertising.
We answer verifiable requests within 30 days. If a request is complex and needs longer, we will tell you why within that period.
9. Children
KerfPress is not aimed at children. Users under 16 should use the service only with a guardian’s knowledge and consent. We do not target children and do not knowingly collect their personal information. If we find that information has been submitted by someone who does not meet the age requirement, we will handle or delete it as the law requires.
10. Security
We use technical and organizational measures appropriate to the size of the service and the risks involved. No internet service can promise absolute security.
11. Changes to this policy
We may update this policy as the product and the law change. Significant changes will be announced on the site, by account notice or another suitable route, and the date on this page will be updated.
12. Contact
Trading name: KerfPress
[email protected]
https://kerfpress.com