TinkerTTF Privacy Policy

WLO Digital LLC d/b/a Tinker Trends · TinkerTTF · www.tinkerttf.com
Version 2.0 · Effective October 25, 2026

WLO Digital LLC d/b/a Tinker Trends operates TinkerTTF. This notice explains how TinkerTTF processes information when you create fonts, verify your email and purchase font projects or memberships.

1 Information we process

The service collects your email address, verification status, accepted terms version, optional marketing preference, necessary session identifiers, Stripe customer and payment identifiers, plan status, billing-period credit usage, project records and font outlines. Card numbers are entered on Stripe-hosted checkout and are not stored by the font app. Sign-in links expire after 15 minutes and their secret tokens are stored as hashes; necessary session cookies expire after 30 days. We have not added advertising trackers or third-party analytics to the application code . Hosting and provider processing still occur.

2 How content moves through the service

Descriptions are sent to OpenAI when you request AI generation. A selected reference image is sent only when you select the reference consent and start generation. Images may be resized and converted before transmission. Generated sheets are also sent for a character-identity check. Font and kit exports send the design data required for server-side compilation.

Opening a saved project reads its contents in your browser; generating a font preview or export transmits its design and outlines to our server. “Save project” downloads a project file to your own device. Project files can contain the design brief and vector outlines, so review them before sharing.

3 Purposes

We process information to generate artwork, trace characters, build and deliver fonts, resume a pending generation, prevent abuse, diagnose errors, respond to requests, and meet legal obligations. The service does not maintain a public catalog of customer fonts.

4 Service providers and other disclosures

OpenAI processes AI requests and character checks; Railway provides hosting and persistent account storage. Resend sends one-use sign-in links to your email address. Stripe processes checkout, subscription billing and payment contact information. These providers may process technical information and content as needed to deliver and secure their services. Their retention periods are not identical to the app’s temporary cache. OpenAI states that API content is not used for model training by default unless the customer opts in; provider safety logs may retain content, typically up to 30 days under default settings, with exceptions. We do not claim that our account has zero-data-retention approval.

We may disclose information where reasonably necessary to comply with law, respond to valid legal process, protect rights and security, or complete a business transfer subject to applicable law and appropriate notice. The application does not currently operate an advertising-data sales or cross-context advertising-sharing program.

5 Retention and storage

Generated sheets and job results are held in the app’s temporary server memory for up to two hours. Expired jobs are removed when cleanup runs; a restart or bounded cache can remove them sooner. Font compilation uses a bounded memory cache. These caches are not a permanent project library.

A pending generation token is stored in your browser’s session storage to try to resume that job. The app does not promise recovery of every unsaved design after refresh. Locally downloaded projects, images, and fonts remain on your device until you delete them. Hosting, support, security, or provider records can persist separately.

Retention: account, font and purchase-access records are retained while needed for account services, licensed downloads, support, security and required financial or legal recordkeeping. Request deletion at hello@wlodigital.com. Some transaction, security and legal records may need to remain after account deletion. Provider logs have separate retention settings; the temporary artwork cache is not a deletion deadline for every record.

6 Checkout and font catalog

Email is used for verification, receipts, purchase access and necessary service communications. Marketing consent is separate and optional; declining it does not block purchases. Contact hello@wlodigital.com to withdraw marketing consent. Full card details are handled by Stripe, not added to fonts or project metadata.

If the Company enables catalog resale under an accepted commercialization license, it will retain and distribute eligible font files, outlines, product names, and necessary rights records. Public font metadata should identify the Company and product rather than the customer’s email or other personal details. Original reference images and prompts are not intended for public catalog publication. Fonts containing identifying, confidential, or protected third-party content need additional review and permission before public distribution.

The service does not currently publish a public customer-font catalog. Before introducing one, we will provide the relevant participation, storage and removal details. Contractual permission to commercialize a font does not remove applicable privacy rights.

7 Choices and requests

You can decline reference-image processing by not submitting the reference, use available manual features, and save your own files. Contact hello@wlodigital.com to ask about access, correction, deletion, or other applicable privacy rights. Describe the relevant request or font ID without sending sensitive information. We may reasonably verify your identity and retain information where law requires or permits it. We will honor rights and response periods that apply to your location; this notice does not assume every privacy statute applies to this business.

8 Security and international processing

We use HTTPS and keep the OpenAI API key on the server. Reasonable safeguards reduce risk but do not guarantee absolute security. Information may be processed in the United States and other countries used by our providers. Applicable transfer safeguards and any additional regional disclosures must be confirmed before deliberately offering the service in jurisdictions requiring them.

9 Children and changes

The service is intended for adults, not children under 18. Do not submit a child’s personal information. Contact us if you believe we have received such information so we can review and take appropriate action. We will identify the effective date of the published policy and provide notice of material changes as required. Contact WLO Digital LLC d/b/a Tinker Trends at hello@wlodigital.com, P.O. Box 9, Cedar Knolls, NJ 07927.