Privacy

• Account details. Your email address and a display name. If you sign in with Google, Google shares your name, email address and profile picture with us; we do not get your Google password or anything else in your Google account.
• Your choices. When you accepted our Terms, and whether you chose to receive account updates and tips, with the date.
• Sign in and security data. Your IP address, browser type and the times you sign in, kept with your session so we can keep accounts secure and stop abuse.
• Your country. Our host tells us which country a visit comes from, based on the IP address. We use it to set the right defaults (for example, whether the tips box starts ticked) and for sales tax. We do not use it to locate you more precisely.
• Plan and payments. Your plan and purchase history. Card details go straight to Stripe; we only see the card brand, the last four digits and the billing country.
• Your fonts. Fonts you save to your account are stored on our servers: their settings, names and kerning, not font files. The font you are working on is also kept in your browser's storage on your device.
• Emails. Whether our emails were delivered, so we can fix sign in problems. We don't track whether you open or click our emails.
• Font licenses. When you buy a shop font, the license file in your download names you by your email address, with the date and what you bought.

• To create and run your account, let you sign in and deliver the plan you chose (this is needed to provide the service).
• To take payments, send receipts and meet tax and accounting rules (needed for the service and by law).
• To keep Letterhead secure, prevent fraud and fix problems (our legitimate interest in a safe, working service).
• To send account updates and tips, only if you said yes. You can withdraw that at any time (your consent).

We never sell your information, never rent it, and never share it with advertisers or data brokers. We do not use your fonts to build or train anything.

We use a few service providers. They only process your information on our instructions and to provide their service to us.

• Vercel hosts the website and app.
• Neon hosts our database, where accounts are stored.
• Google (Google Workspace) sends our emails.
• Stripe processes payments and calculates sales tax.
• Google also handles sign in, only if you choose to sign in with Google.

We may also share information if the law requires it, to protect people from harm or fraud, or with a buyer if Letterhead is ever sold, in which case this policy keeps applying to your information.

Our providers store data in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, transfers to the United States are covered by our providers’ data processing terms, including the European Commission’s standard contractual clauses.

• Account details: while your account exists. When you delete your account, we delete them within 30 days.
• Sign in sessions: until they expire or you sign out.
• Purchase and tax records: as long as tax law requires, usually up to 7 years.
• Backups roll off within 30 days.

We only use the cookies that keep you signed in. They are needed for the service, so there is no cookie banner. Your theme choice and your font projects are saved in your browser’s own storage on your device. We use no analytics, advertising or tracking cookies. If we ever add analytics, we will update this policy first.

• Unsubscribe from tips with the link in any of those emails, or switch them off in the editor's account menu.
• See, correct, download or delete the information we hold about you.
• Object to how we use your information, or ask us to limit it.

Email lh@loserlabs.io and we will answer within 30 days. We may need to confirm it is really you. If you are in Europe or the UK, you can also complain to your local data protection authority.

California residents: we never sell or share personal information, including for advertising, and we do not use sensitive personal information. You have the rights to know, delete and correct, and we will not treat you differently for using them.

Other US states with privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon) give you similar rights. If we turn down a request, you can appeal by replying to our answer, and we will respond within 45 days.

We don't track you across other websites and we make no automated decisions about you. We treat Global Privacy Control and Do Not Track signals as a request not to sell or share your information, which we never do anyway.

Letterhead is not for anyone under 16, and we do not knowingly collect information from them. If you think a child has made an account, tell us and we will delete it.

We use encrypted connections, we do not store passwords (you sign in with Google or an email link), and access to our systems is limited. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

If we change this policy in a way that matters, we will email you before the change applies.

Loser Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Email: lh@loserlabs.io. The rules for using Letterhead are in our Terms.