Privacy Policy

Last updated: 2026-05-07

This policy explains what data Favicon Tools collects when you use favicontools.com, why we collect it, and what choices you have. We have tried to write it in plain language. If anything is unclear, email privacy@favicontools.com and we will answer.

What we collect

Images you upload

When you generate a favicon kit on the home page or the create flow, the source image is sent to our server only long enough to produce the resized PNGs and the packaged ICO. We do not retain your uploaded images after the download completes, we do not use them to train any model, and we do not share them with third parties. Most processing happens in-browser; server-side processing is reserved for the assembly steps that browsers cannot do efficiently on the client.

URLs you submit to the verifier

When you ask the verifier to audit a site, we fetch the public HTML and the icon assets it references so we can grade coverage. We do not store the response bodies; we keep a short log of the URL, the timestamp, and the audit summary so we can debug failures and improve coverage rules.

Account information

If you choose to create an account to access dashboard features, authentication is handled by Clerk. The data we receive from Clerk is limited to your email address, a user identifier, and basic profile metadata. We do not see or store your password.

Usage analytics

We use PostHog to understand how the product is used in aggregate: which pages get traffic, how often the generator is run, and where people drop off. PostHog is configured to mask sensitive form inputs by default, and we do not send the contents of uploaded images to PostHog under any circumstance.

Server logs

Our hosting provider, Vercel, retains standard request logs that include IP addresses, request paths, response codes, and user-agent strings. These logs are used for security and operational troubleshooting and are deleted on Vercel’s default retention schedule.

Cookies

Favicon Tools uses a small number of cookies and similar storage:

• Session cookies set by Clerk when you sign in, used to keep you authenticated across pages.
• Analytics cookies set by PostHog to attribute page views and product events to a consistent anonymous identifier.
• Theme preference stored in local storage so the site remembers whether you prefer light or dark mode.

We do not run third-party advertising cookies and we do not embed social media tracking pixels.

Third-party services

We rely on a small set of vendors to operate the site. Each one has its own privacy policy that you should consult if you want the full detail.

• Vercel hosts the site and the API routes. They see request metadata and any data passed through the application.
• Clerk handles user authentication and stores account credentials.
• PostHog collects product analytics on page views and feature usage.
• Resend delivers transactional email such as password resets and contact confirmations.
• Vercel Blob stores temporary files associated with generated kits when needed.

Data retention

Uploaded images are deleted as soon as your generation finishes. Verifier audits retain a summary record for up to 90 days so we can investigate regressions. Account records are retained for as long as your account is active and for a short cleanup period after you delete it. Server logs follow Vercel’s default retention. Analytics events are retained according to PostHog’s default retention for our project.

Your rights

Depending on where you live, you may have rights under the GDPR, the UK GDPR, the CCPA, or other privacy laws. At a high level, these rights include:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to object to certain processing, including analytics
• The right to lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@favicontools.com from the address on file for your account or with enough context for us to identify the relevant data. We respond within 30 days for most jurisdictions.

Children

Favicon Tools is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please email privacy@favicontools.com and we will delete it.

International transfers

Our vendors operate in the United States, the European Union, and other regions. By using the site you understand that your data may be transferred to and processed in countries other than your own, subject to the protections required by applicable law.

Changes to this policy

We may update this policy as the product and the legal landscape evolve. When we make a material change, we will update the “Last updated” date at the top of the page and, where appropriate, surface a notice in the product. We recommend reviewing this page periodically.

Contact

For privacy questions, complaints, or data requests, email privacy@favicontools.com. For everything else, the contact page lists the right address for each kind of question.