Privacy Policy
Last updated: 10 August 2026
This policy explains what SVG Pattern (svgpattern.com) collects, why, and what you can do about it. It is written to be read, not to be survived.
The short version
- Patterns are generated entirely in your browser. We never see them.
- Images and SVG files you load as a mask or density map never leave your device.
- The only personal data we store is your email address, and only if you buy credits.
- We do not sell data, run ad networks, or build advertising profiles.
What we collect and why
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Email address | When you buy credits, or enter it to check your balance | It is the only identifier attached to your credits — there is no password or account | Performance of a contract (Art. 6(1)(b)) |
| Export log — which pattern type and settings were exported, and when | Each time you export a file | To deduct the correct number of credits and to resolve billing disputes | Performance of a contract (Art. 6(1)(b)) |
| Payment data — card details, billing address, tax location | At checkout | Collected and held by Paddle, not by us. We never see your card details | Performance of a contract (Art. 6(1)(b)) |
| Anonymous usage analytics — page views, which patterns are used, whether an export was attempted | While you use the site | To understand which parts of the generator matter and which are ignored | Consent (Art. 6(1)(a)) where cookies are used; legitimate interest for cookieless counting |
What we deliberately do not collect
- The patterns themselves — only the parameter set and pattern type, never a rendered file.
- Masks and density maps you upload. These are read by your browser and stay there.
- Passwords. There are none.
- Card numbers. Paddle handles payment; that data never touches our systems.
Cookies and analytics
We use two analytics tools, and they behave differently:
- Cloudflare Web Analytics — cookieless. It counts page views without storing anything on your device and without identifying you. It runs regardless of consent because there is nothing to consent to.
- Google Analytics 4 — sets cookies, so we ask first. Until you accept, Google Consent Mode keeps analytics storage disabled and only anonymous, cookieless pings are sent. Decline and it stays that way. Accept and we can measure returning visits.
Your choice is stored locally in your browser under the key svgp_consent. Clearing
your site data will make the banner appear again.
Who else processes your data
| Processor | What they handle | Where |
|---|---|---|
| Paddle.com Market Ltd | Payments, invoicing, tax, refunds. Merchant of Record | UK / EU |
| Supabase | Database holding your email, credit balance and export log | European Union — Frankfurt, Germany (AWS eu-central-1) |
| Cloudflare | Hosting, CDN, cookieless analytics | Global edge network |
| Analytics (only after you consent) and the web font used by the site | EU / US |
How long we keep it
- Email and credit balance: as long as you hold unused credits or a lifetime licence. Accounts with a zero balance and no activity for 24 months are deleted.
- Export log: 24 months, then deleted.
- Payment and invoice records: retained by Paddle for the period required by tax law, typically 7–10 years. This is outside our control.
Your rights
If you are in the EU, UK or another jurisdiction with comparable law, you have the right to access, correct, delete, export and restrict processing of your personal data, and to object to processing based on legitimate interest. You may also withdraw analytics consent at any time by clearing your site data.
To exercise any of these, write to support@svgpattern.com from the email address in question. We will respond within 30 days.
Note the practical consequence of deletion: because your email is your account, deleting it forfeits any unused credits. We will say so and confirm before acting.
You also have the right to lodge a complaint with your local data protection authority.
Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
Changes
If this policy changes materially, the “last updated” date will change and, where the change affects data we already hold, we will make a reasonable effort to notify affected users by email.