Privacy Policy

Who we are

FixMySVG is operated by the operator of FixMySVG ("we", "us"). You can contact us about privacy at support@fixmysvg.com.

The short version

• Your SVG files stay on your device. Analysis, Safe Fix, previews and comparisons run in your browser.
• An SVG is only sent to our server if you explicitly save a project to your dashboard. You can delete it at any time.
• We do not sell personal data and we do not build advertising profiles.
• Analytics, when enabled, count anonymous events only — never file contents or file names.

Data we process

If you use FixMySVG without an account

• A salted hash of your IP address, kept for up to 2 days, to count the free daily Safe Fixes and prevent abuse. The hash cannot be turned back into your IP address.
• Standard server logs kept by our hosting provider (IP address, date, requested page) for security and reliability.

If you create an account

• Account data: email address, optional name, preferred language, and your password stored only as a one-way bcrypt hash.
• Usage data: the number of analyses and Safe Fixes, and a "recent files" list with file names, sizes, path counts and results for files you check while logged in. The files themselves are not stored. You can clear this list at any time.
• Saved projects: the original and repaired SVG you choose to save, until you delete them.
• Billing data: your plan, renewal dates and purchase history. When real payments are enabled they are processed by our payment provider (Stripe); we never see or store your card number.
• Session cookie: a random token that keeps you logged in (see the Cookie Policy).

Why we process it

• To provide the service you request, including accounts, plan limits and saved projects (performance of a contract).
• To keep the service secure and prevent abuse, such as rate limiting logins (legitimate interest).
• To handle billing and meet legal obligations such as tax records, once real payments are enabled.
• To understand, in aggregate, which features are used (legitimate interest; anonymous and cookieless).

How long we keep data

• Account data, usage history and saved projects: until you delete them or delete your account.
• Hashed IP counters for the free tier: up to 2 days.
• Password reset links: they expire after 1 hour.
• Login sessions: 30 days after last use.
• Billing records: as long as required by law once real payments are enabled.

Who we share data with

Only with service providers that help us run FixMySVG: our hosting provider, an email provider for account emails and, once enabled, our payment provider. They process data on our behalf and only for these purposes. We may disclose data if required by law.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data and to object to certain processing. You can delete your account, history and saved projects yourself from the dashboard, or contact us at support@fixmysvg.com. You also have the right to complain to your local data protection authority.

Security

Passwords are hashed with bcrypt, sessions use HttpOnly cookies, and the site should be served over HTTPS. Uploaded SVG files are treated as untrusted: scripts and remote references are stripped before anything is displayed.

Children

FixMySVG is not directed at children under 13 (or under 16 where required by local law), and we do not knowingly collect their personal data.

Changes to this policy

We will update this page when our practices change and adjust the date above. Significant changes will be announced on the site or by email.