Privacy Policy

Last updated: March 22, 2026

CyFi Designs ("we," "us," or "our") operates cyfidesigns.com and its subdomains. This Privacy Policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

1.1 Information You Provide

Account information: When you create an account, we collect your email address and display name.
Payment information: Credit purchases are processed by Stripe. We do not store your card number, CVV, or full payment details on our servers. Stripe handles all payment data under their own privacy policy.
Support requests: If you contact us, we retain the correspondence to resolve your issue.

1.2 Information Collected Automatically

Analytics: We use Google Analytics 4 (GA4) to collect anonymized usage data including pages visited, session duration, device type, browser, approximate geographic region, and referral source. GA4 uses first-party cookies. You can opt out using a browser add-on or by disabling cookies.
Server logs: Our web servers log IP addresses, request timestamps, and URLs accessed. Logs are retained for up to 90 days for security and troubleshooting.

1.3 Free Tool Data

Our free tools (Subscription Tracker, Photo Deduplicator, QR Generator, Color Converter, Password Generator) process all data locally in your browser. No files, images, passwords, or personal data from these tools are uploaded to our servers. The Subscription Tracker stores your data in your browser's localStorage, which stays on your device.

2. How We Use Your Information

To provide and maintain our services
To process credit purchases and manage your account
To analyze usage patterns and improve our tools (aggregated, anonymized data only)
To respond to support requests
To detect and prevent fraud or abuse

3. Information Sharing

We do not sell, rent, or trade your personal information. We share data only with:

Stripe: Payment processing (as described above)
Google Analytics: Anonymized usage analytics
Cloudflare: CDN and security services (processes request metadata)
Law enforcement: If required by law, subpoena, or court order

4. Cookies

We use a limited number of cookies:

Google Analytics cookies (_ga, _ga_*): Track anonymized usage. Expire after 2 years. Can be blocked via browser settings.
Cloudflare cookies (__cf_bm): Security and bot detection. Session-based.
Essential cookies: Session management for logged-in users. Required for account functionality.

We do not use advertising cookies or third-party tracking pixels.

5. Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account closure upon request.
Payment records: Retained for 7 years as required for tax and accounting compliance.
Analytics data: Aggregated data retained indefinitely. Individual session data expires per GA4 default settings (14 months).
Server logs: Retained for up to 90 days.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing
Data portability (receive your data in a structured format)
Withdraw consent where processing is consent-based

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Data Security

We use industry-standard security measures including HTTPS encryption, firewalled servers, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If we discover we have collected such information, we will delete it promptly.

9. International Users

Our servers are located in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. By using our services, you consent to this transfer.

10. California Residents (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect and how it is used
Request deletion of your personal information
Opt out of the sale of personal information (we do not sell personal information)
Non-discrimination for exercising your privacy rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions or requests:

Email: [email protected]
Website: cyfidesigns.com/support.html