Privacy Policy

Effective Date: September 13, 2026

1. Who we are

ProDesigner is operated by GT Souvenir LLC, a limited liability company organized under the laws of the State of Connecticut, United States, doing business as ProDesigner (“we”, “us”, “our”).

For the purposes of the EU and UK General Data Protection Regulation, GT Souvenir LLC is the data controller for any personal data processed through prodesigner.app.

You can reach us about anything in this policy at [email protected]. We have not appointed a Data Protection Officer; processing under this policy does not meet the threshold in Article 37 that would require one.

2. The short version

The tools run on your device. We do not see your files, we do not run ads, and we do not sell data. If you create an account and choose to save a project, that project — its settings and, if you attach it, its source file — is stored on our servers so you can get it back. That upload happens only when you press Save, and you can download or delete everything at any time.

The rest of this page explains the narrow set of things that are unavoidable when a website is served over the internet at all, what an account adds if you create one, and the small number of third parties your browser may contact.

3. What we do not collect

We want to be specific rather than reassuring. We do not collect, store or process:

• • Your name, address, phone number or date of birth
• • Payment or card details — payments are handled entirely by Stripe (and Ko-fi for donations) and never touch our systems
• • The images, audio, video or vector files you process with our tools
• • Behavioral profiles — there is no tag manager, session recorder or heatmap on this site, and nothing follows you between visits. Page views are counted twice over, once by us and once by Cloudflare Web Analytics, and neither count can identify you; sections 4 and 7 explain exactly how
• • Advertising identifiers, conversion pixels or cross-site tracking data
• • Biometric data, precise location such as a city, postcode or coordinates, or any special category of data under GDPR Article 9 — the most precise location we ever record is your country, or, for visitors in the United States, the state

With or without an account, we never see files you haven't chosen to save.

4. What is processed when you visit

Server logs. prodesigner.app is served through Cloudflare. Like every web server, Cloudflare's edge records a technical log of each request: the IP address it came from, the user agent string, a timestamp, the URL requested and the response status. This is inherent to delivering a page over HTTP and cannot be switched off without ceasing to serve the site.

We use these logs only to deliver the site, to keep it available, and to detect and mitigate abuse such as denial-of-service attacks and automated scraping. We do not use them to build profiles, and we do not combine them with anything else.

Cloudflare, Inc. acts as our processor for this purpose under its Data Processing Addendum, and retains logs according to its own published schedule. Cloudflare is also our hosting provider: the pages themselves are static files, and the account and measurement features described below run on a Cloudflare Worker with a database in the same account.

Usage measurement. So that we can tell whether anyone is actually using a tool, each page asks your browser to report four things: the path of the page (never the query string, which on this site can contain the identifier of one of your saved projects), the language the site is being displayed in, whether the screen is phone-sized, and the site that referred you — reduced to its domain name, so a search you typed is never included. Your country is taken from the connection, as it is for any request to any website. For connections from the United States we also record the state, so that we can tell where in one large country a tool is being used; we record nothing finer than that anywhere — no city, no postcode, no coordinates — and no state or region for any other country. No cookie is set. Cloudflare Web Analytics, described in section 7, counts the same visit separately, and it is the only third party involved. The measurement itself stores nothing on your device — it creates no identifier, and it reads and writes nothing in your browser. There is one exception, and it is the opposite of tracking: if you switch the measurement off, that choice has to be remembered somewhere, so it is kept as a single flag in your browser and is never sent to us or to anyone else. Section 8 lists everything this site keeps on your device.

Counting people rather than page loads normally requires identifying them. It does not here. Our server derives a short code from your IP address, browser and language settings combined with a secret that is generated fresh every day and destroyed two days later. While the day's secret exists the code lets us count you once instead of five times; once it is destroyed the code cannot be recreated from your IP address or from anything else. The same visitor on two different days is therefore two unrelated codes, and there is no way — for us, or for anyone who obtained our database — to assemble a history of an individual. Your IP address itself is never written down.

We keep the detailed records for three months, in Cloudflare's Workers Analytics Engine, and day-by-day totals — how many visitors, from which countries, in which languages, on which pages — indefinitely. If your browser sends a Do Not Track or Global Privacy Control signal, none of this is reported at all.

5. Accounts and cloud saves (optional)

Every tool works fully without an account. If you create one, here is exactly what that adds.

• • What we collect at sign-up: your email address, and a display name if you give one. You can sign in with a password, an emailed magic link, or a passkey. If you set a password we store it hashed, never in readable form.
• • Sign in with Google (optional): if you use the “Sign in with Google” button, Google sends us your name, your email address, whether Google has verified that address, and the stable identifier of your Google account. We use these only to create or recognise your ProDesigner account, and we keep the identifier so the button finds your account next time. We do not store your Google profile picture. We do not receive, and never ask for, access to your Gmail, Drive, contacts or anything else in your Google account — only the sign-in itself. Google's own privacy policy governs what Google does with your sign-in. Deleting your account removes the identifier along with everything else.
• • A session cookie keeps you signed in. It is essential (not tracking) and is the only cookie an account adds. Each active session also records the IP address and browser it was created from, so you can recognise a session that is not yours; sessions expire and are then removed.
• • What we store when you save a project: the project's settings, its title, timestamps, which tool made it, a small preview image, and — if the project has one — the source file you attached.
• • Where it is stored: on Cloudflare's network (D1 and R2). Sign-in emails are delivered by Resend; sign-in abuse protection is provided by Cloudflare Turnstile.
• • Abuse prevention: when an account is created we record the IP address it came from, for up to 60 days, so that a script cannot open hundreds of accounts. It is stored against the account, used for nothing else, and deleted with the account.
• • Retention: until you delete it. Deleting a project removes it and any files nothing else references; deleting your account removes everything.
• • Export: everything you have saved is downloadable at any time as open JSON plus your original files, whether your account is free or paid, in good standing or not.

Stored projects are encrypted in transit and at rest on our infrastructure, but they are not end-to-end encrypted: the service can technically read what you save. We don't, except as needed to operate the service (storage quotas, de-duplication by content hash) or as required by law.

6. Payments and paid plans

Paid plans are available, and everything below applies today.

• • Paid plans add storage beyond the free tier. They are how ProDesigner is funded — instead of ads or selling data — and the free tools and free tier remain free.
• • Payment is handled by Stripe, Inc.; card details go to Stripe, not to us. We receive and store only your plan, billing status and country, and what tax law requires us to keep.
• • Pricing may be adjusted to your country (purchasing-power parity). If it is, the country signal comes from your payment provider or network region, and is used for pricing only.
• • Canceling is one click, effective at the end of the paid period. Canceling, downgrading or a failed payment never deletes anything: storage over your new cap becomes read-only and stays fully exportable.

7. Third parties your browser may contact

A small number of resources are loaded from servers we do not operate. When your browser requests them, it necessarily reveals your IP address to that server. We list them individually because we would rather be exact than vague.

• • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — loaded by five tools (Dither & Halftone, ASCII, GIF Compressor, GIF Editor and Palette Studio) to render interface or preview typefaces. Google receives your IP address and user agent. We are in the process of self-hosting these fonts, after which this entry will be removed.
• • jsDelivr (cdn.jsdelivr.net), with unpkg (unpkg.com) as fallback — three tools (Dither & Halftone, the GIF Compressor and the Background Remover) download a WebAssembly component from one of these public package CDNs the first time it is needed. The CDN receives your IP address. The files are public open-source libraries; nothing about your own file is transmitted. We are in the process of self-hosting them, after which this entry will be removed.
• • Hugging Face (huggingface.co and its content delivery hosts) — the Background Remover downloads its image-segmentation models from Hugging Face the first time you choose an engine, and caches them in your browser. Hugging Face receives your IP address. The models are public files; your picture is never uploaded, and the removal itself runs entirely on your device.
• • Ko-fi (ko-fi.com) — only if you choose to click a Donate button. You then leave our site entirely and Ko-fi's own privacy policy governs. We never receive your payment details.
• • Share destinations — only if you click a share tile. These are plain links; no platform script, SDK or pixel runs on our pages. Nothing is transmitted unless you click.
• • Resend (resend.com) — delivers account sign-in emails, only if you request one. Resend receives your email address for delivery.
• • Google Sign-In (accounts.google.com) — only on the sign-in and account-creation pages, and only when the “Sign in with Google” button is offered. Google's script draws the button, and Google receives your IP address and user agent when the page loads it; if you use the button, Google learns that you signed in to ProDesigner. We use it for identification only — see section 5 for what we receive.
• • Cloudflare Turnstile — shown on the account sign-in form to block automated abuse. Runs without tracking cookies.
• • Cloudflare Web Analytics (static.cloudflareinsights.com) — a small script that Cloudflare adds to every page. It counts page views and reports the country the visit came from, the browser and operating system, and how quickly the page loaded. Cloudflare states that it uses no cookies or other client-side storage and does not fingerprint visitors by IP address or user agent string. Cloudflare processes this for us under its Data Processing Addendum and shows us the results for six months.
• • Ko-fi (ko-fi.com) — the donation page links to (and may embed) Ko-fi's payment panel. If you use it, Ko-fi and its card processor Stripe handle the payment under their own privacy policies; card details never touch our systems.

Beyond these, nothing on this site loads code, fonts, images or scripts from a third party, and only the two measurements described in section 4 and above record that you were here.

8. Storage on your own device

We set no cookies for visitors without an account; signing in adds one essential session cookie, described in section 5. Beyond that, a few small values are kept in your browser so the site behaves the way you left it. None of them is an identifier, none is used for tracking, and none is ever sent to us or to anyone else. The site itself sets these:

• • pd-theme — your chosen light, medium or dark appearance
• • pd-theme-auto — whether the theme is still following your device clock or you have picked one yourself
• • pd-lang — that you have chosen a language, so we stop offering you one
• • pd-langbar — that you dismissed the language suggestion bar
• • pd-no-count — present only if you have asked us not to count your visits (section 4). It exists to stop the measurement, not to perform it

Each tool keeps its own copy of the appearance and language you chose, under its own name, so that it opens matching the rest of the site instead of showing a default first. Beyond that a tool remembers nothing: it opens empty every time, with no trace of the last file you worked on, and it does not keep your work between visits. The single exception is the GIF compressor, where presets you have created and named yourself are kept so they are still in the list when you return.

You can clear all of it at any time through your browser's site-data settings; the site simply returns to its defaults. Because none of it is a cookie and none of it is used for tracking, no consent banner is required for it.

9. If you email us

The support form on this site does not send anything to a server. It opens a pre-filled message in your own email client, which you then send yourself. There is no form endpoint and no database behind it.

If you do write to us at [email protected] or [email protected], we hold your email address and the contents of your message for as long as needed to deal with the matter and to keep a record of what was agreed — ordinarily no more than 24 months. The legal basis is our legitimate interest in responding to correspondence. You can ask us to delete it at any time.

10. Legal bases for processing (GDPR Article 6)

• • Performance of a contract — Article 6(1)(b) — for accounts and cloud saves: storing and returning the projects you choose to save, and operating paid storage plans when they exist.
• • Legitimate interests — Article 6(1)(f) — for server logs used to deliver the site, keep it available and prevent abuse. Our interest is in operating a working, secure website; the processing is minimal, is not used for profiling, and we consider it does not override your rights.
• • Consent — Article 6(1)(a) — for anything you initiate by clicking, such as opening a donation page or a share link.
• • Legitimate interests — Article 6(1)(f) — for correspondence you send us, so that we can reply to it.

We carry out no automated decision-making and no profiling within the meaning of Article 22, and we process no special categories of data under Article 9.

11. Your rights

If you are in the EU, the UK, or another jurisdiction with comparable law, you have the right to request access to your personal data, its rectification or erasure, restriction of processing, data portability, and to object to processing carried out on the basis of legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful before.

Write to [email protected] and we will respond within one month, as Article 12(3) requires. One practical limit is worth stating plainly: for a visitor without an account we hold no identifier that could connect a server log entry to a particular person, and Article 11 does not require us to acquire additional data purely in order to do so. If you have an account, or if you have written to us, we can of course find and delete what relates to you.

You also have the right to lodge a complaint with your supervisory authority — your national data protection authority in the EU, or the Information Commissioner's Office in the UK.

With an account, access and portability are self-service: the export endpoint downloads everything you have stored, and deleting a project or your account takes effect immediately — no email required.

12. International transfers

We are based in the United States. Cloudflare serves the site from an edge location near you, so the page itself usually travels no further than your own region, but request logs may be processed in the United States.

Transfers to Cloudflare are covered by the Standard Contractual Clauses incorporated into Cloudflare's Data Processing Addendum. Cloudflare hosts the site, the account database and the file storage, so account data and saved projects sit on its network alongside request metadata. What never reaches it is a file you have not chosen to save.

13. California residents

This section is provided under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act as amended by the CPRA.

Categories collected: identifiers (an IP address in server logs; an email address and an account identifier if you create an account; the IP address recorded at sign-up for abuse prevention) and internet activity information (the URL requested, a timestamp, a user agent string). Commercial information — your plan and billing status — if you buy a paid plan. No other CCPA category is collected.

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We have never done so. We offer no financial incentive in exchange for personal information, and we do not discriminate against anyone for exercising a privacy right.

Do Not Track: we honour it by default in the only meaningful sense — there is nothing on this site that tracks you across time or across other sites, whether or not your browser sends the signal.

California residents may request disclosure of the categories and specific pieces of personal information collected, deletion, or correction, by writing to [email protected]. The same practical limit described in section 11 applies.

14. Children

ProDesigner is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where local law sets that threshold). The tools themselves need no account and ask for nothing. An account requires an email address; if you believe a child has created one, or has sent us personal information by email, write to [email protected] and we will delete it.

15. Changes to this policy

If this policy changes we will update the effective date at the top of this page, and material changes will be described here. We encourage you to check back after a significant update to the site or its tools. We do not have your contact details, so we cannot notify you individually.

16. Contact

GT Souvenir LLC, doing business as ProDesigner — a Connecticut limited liability company, United States.

Privacy inquiries and rights requests: [email protected]

General support: contact us here. See also our Terms & Conditions.

This policy describes what actually happens on prodesigner.app, verified against the site's own source code rather than adapted from a template. If you find something here that does not match what the site does, tell us and we will correct it.