This policy explains what data LogoAnimator, operated by [OPERATOR NAME], [OPERATOR ADDRESS], collects about you, why, and what your rights are. The short version: we collect the minimum needed to run the service, we use cookie-less analytics, and we never sell your data.
1. Data we collect
Account data
- Email address — used to sign you in, send essential service emails (receipts, password resets, important changes), and answer your support requests.
- Password — stored only as a salted scrypt hash. We cannot see or recover your actual password.
Your projects
When you save a project, we store the uploaded image and your animation settings so you can come back to them. Projects are private to your account (and to your team on a Studio plan). Uploads you don’t save are processed transiently and not kept.
Billing data
Payments are handled entirely by Stripe. We never receive or store your card number. We store only your Stripe customer ID, subscription IDs, and plan status, so we know which features to unlock. Stripe processes your payment details under its own privacy policy.
Analytics
We use PostHog (EU-hosted) to understand how the product is used, and optionally Plausible for aggregate page-view counts. PostHog runs without cookies — we store no analytics identifiers on your device, so there is no cookie banner. We do not capture form contents or page text.
When you are signed in, we associate product events (for example: uploading a logo, exporting, starting a checkout) with your account ID so we can understand how real accounts use the product and improve it. We never send your name or email address to our analytics provider. Signing out unlinks your device from your account.
Technical logs
Like almost every website, our hosting infrastructure keeps short-lived server logs (IP address, request path, timestamp) for security and debugging. These are automatically deleted on a rolling basis.
2. What we use data for
- Providing the service: sign-in, saving projects, unlocking paid features.
- Billing and receipts, via Stripe.
- Essential service emails. We do not send marketing email unless you explicitly opt in, and every such email has an unsubscribe link.
- Security: preventing abuse, fraud, and unauthorized access.
- Understanding product usage (PostHog, and optionally Plausible) to improve the product.
Where the GDPR applies, our legal bases are performance of contract (running your account and plan), legitimate interest (security, aggregate analytics), and legal obligation (tax and accounting records).
3. What we never do
- We never sell your personal data, and we never share it with advertisers or data brokers.
- We never store card numbers.
- We never use your uploaded logos or projects for marketing or to train machine-learning models without your explicit permission.
4. Sub-processors
We share data only with the service providers below, and only as needed to run LogoAnimator:
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, CDN, and DDoS protection | Technical request data (IP, headers), stored projects |
| Stripe | Payment processing and billing | Email, payment details (held by Stripe, not us) |
| PostHog (EU) | Product analytics | Product events linked to an account ID; no cookies, no names or emails |
| Plausible | Cookie-less, aggregate web analytics | Anonymized usage data; no cookies, no profiles |
| [EMAIL PROVIDER] | Transactional email (receipts, password resets) | Email address, email content |
If we add or replace a sub-processor that handles personal data, we will update this page.
5. Data retention
- Account data and projects are kept while your account exists and deleted within 30 days after you delete your account.
- Billing records are kept as long as tax and accounting law requires, even after account deletion.
- Server logs are deleted automatically on a short rolling window.
- Unsaved uploads are processed transiently and not retained.
6. Your rights (GDPR and similar laws)
If you are in the EU/EEA, UK, or another region with similar data protection laws, you have the right to:
- Access the personal data we hold about you;
- Export your data in a portable format (data portability);
- Correct inaccurate data (e.g. change your email in account settings);
- Delete your account and data (“right to be forgotten”) — available in account settings or by emailing us;
- Object to or restrict certain processing, and withdraw consent where processing is based on consent;
- Complain to your local data protection authority.
To exercise any of these rights, email [SUPPORT EMAIL]. We respond within 30 days. We may ask you to verify ownership of the account first.
7. Security
All traffic is encrypted in transit (TLS). Passwords are hashed with scrypt and never stored in plain text. Access to production data is restricted to the operator. No system is perfectly secure; if a breach ever affects your personal data, we will notify you and the relevant authorities as the law requires.
8. Children
LogoAnimator is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
9. Changes to this policy
If we make material changes to this policy, we will email account holders or show a notice in the app before the changes take effect. The “Last updated” date at the top always reflects the current version.
10. Contact
Data controller: [OPERATOR NAME], [OPERATOR ADDRESS]. For anything privacy-related, email [SUPPORT EMAIL]. See also our Terms of Service and Commercial Use License.