Privacy policy
This policy explains what happens to your data when you use graffiti-letters.com.
Who runs this site
graffiti-letters.com is run by Sadeem, an individual web developer based in Pakistan, who is responsible for the data described here. You can reach him through the contact page.
The generator runs in your browser
Text you type into the generator is turned into graffiti letters on your own device. It is not sent to our servers. The text is added to the page address so you can share it; if you reload or share that address, the text is part of the request and can appear in standard server logs.
If you add your own photo as a background, it is resized and used only inside your browser. It is never uploaded, is not part of share links, and is gone when you close or reload the page.
Hosting
The site is hosted on Cloudflare, which processes technical data such as IP addresses to deliver pages and protect against abuse.
Analytics
We use Cloudflare Web Analytics to count visits and see which pages are popular. It does not use cookies and does not build profiles of individual visitors.
Only if you accept cookies, we also use Microsoft Clarity (how people use pages: clicks, scrolls, anonymous session replays, with text you type masked) and Google Analytics 4 (visit statistics). Microsoft and Google process this data under their own privacy policies. You can change your choice any time on the cookie policy page.
Pro purchases
Pro is sold through Paddle (paddle.com), which acts as our merchant of record. When you buy, you enter your email, country and payment details in Paddle's checkout, and Paddle processes them under its own privacy policy. We never see or store your card details.
To unlock Pro, the site sends your Paddle transaction id, or the email you paid with if you restore Pro on another device,
to our own license check at /api/license. That check asks Paddle whether the purchase is paid and active, and we do
not store what you send. The result (the transaction id or email, your plan and its end date) is saved in your browser's
localStorage so Pro stays on, and is re-checked about once a week. Choosing "Remove from this device" on the Pro page,
or clearing your browser data, deletes it.
The site also saves your light or dark theme choice in localStorage. Nothing in localStorage is sent to advertisers.
Advertising
The site may show ads from Google AdSense and its partners. Ads are not running yet; this section applies once they are. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on those visits.
You can opt out of personalized advertising in Google Ads Settings, or opt out of some third-party vendors at aboutads.info. Learn more about how Google uses data from partner sites.
When ads are running, visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalized ads are shown.
Affiliate links
If you click an affiliate link, the retailer may set its own cookies to record the referral. Their privacy policies apply.
If you email us, we use your address and message only to reply, and we do not add you to any list.
Accounts
You can sign in with a one-time link sent to your email. We do not store a password or an account record: the sign-in keeps your verified email in a secure cookie on your device for 30 days. Sign-in emails are sent through Resend (resend.com). Signing out deletes the cookie.
Newsletter
If you subscribe, we store your email, your language and the page you signed up on in our database at Supabase (supabase.com), and send the newsletter through Resend. You are only added after you click the confirmation link, and every newsletter has a link to unsubscribe. We do not sell or share the list.
Feedback and problem reports
When you send feedback, we store your message, the page it was sent from, your language, your browser name and, only if you give it, your email, in Supabase. We use it to fix problems and plan new features, and reply if you left an email. Ask us and we delete it.
Children
The site is suitable for all ages. Using the generator needs no personal information. The optional newsletter, sign-in and feedback email field are meant for people old enough to give an email address under the rules where they live (13 in many countries); younger visitors should ask a parent. We do not knowingly collect personal data from children.
Your rights
Depending on where you live, you may have the right to access, correct or delete personal data about you. Because we hold almost none, the simplest route is to contact us and we will help. For order and payment records, we will pass your request to Paddle or you can contact Paddle directly.
Changes
If this policy changes, the date at the top of the page changes too.