Privacy Policy

Your Privacy

FontReport is operated by FontReport Pty Ltd (ABN: 19 696 131 709). This policy describes how we collect, hold, use and disclose personal information in connection with the FontReport service.

FontReport is designed to analyze websites while respecting your privacy. This policy explains what information we collect, why we collect it, who we share it with, and how you can access or correct your information.

If you have questions about this policy or wish to make a complaint about how we handle your personal information, please contact us at hello@fontreport.com.

Information We Collect

Website Scanning Data

When you scan a website, we temporarily access the target website's public content to analyze font usage. We do not store the content of scanned websites beyond the duration of the scan.

Rate Limiting Data

To prevent service abuse and limit excessive usage, we temporarily store IP addresses with timestamps to track scan frequency. This data:

• Contains only IP addresses and request timestamps
• Is automatically removed frequently through cleanup processes
• Is used solely to enforce usage limits and prevent service abuse
• Is not shared with third parties or used for any other purpose
• Is stored only as long as necessary for rate limiting purposes

Scan Results

Completed font analysis reports are stored to allow you to bookmark, share, or revisit your results. These reports contain only the font analysis data (font names, file URLs, and metadata) from your scan – not the full website content. Retention periods vary by service tier:

• Free scans: Reports are stored for up to 7 days, then automatically deleted
• Starter and Agency scan packs: Reports are stored for up to 90 days to enable access through your scan dashboard
• Enterprise plans: Reports are stored for up to 365 days, including FontMonitor scheduled scan history

Reports are automatically deleted after the applicable retention period expires. Paid customers can also manually delete individual scan reports at any time from their scan dashboard.

Font Licensing Information

Enterprise customers using FontMonitor may voluntarily provide font licensing information within their scan reports. This includes:

• Marking individual fonts as licensed
• Adding licence notes (such as the licence type or vendor)
• Recording licence expiry dates

This information is stored alongside your scan results and is used to:

• Treat the font as licensed in future FontMonitor scans
• Send you notifications when a licence is approaching expiry or has expired (these notifications can be disabled in your dashboard notification preferences)

Font licensing information you provide is entirely voluntary. It is stored against your account and domain, and persists across future scans so that new scans for the same domain recognise your licensing status. This information is retained for as long as your account is active, and can be removed at any time by editing or deleting the licence entry from your scan report.

Server Logs

Our servers automatically log basic technical information for debugging, security, and preventing excessive usage, including:

• IP addresses of users initiating scans
• URLs of websites being scanned
• Scan progress information (pages found, links discovered)
• Technical warnings and error messages
• Timestamps of scan activities
• HTTP response codes and connection status

These logs are kept for up to 30 days and are used solely for technical troubleshooting, performance monitoring, and identifying scanning issues.

Analytics

We use Google Analytics to understand how visitors use our website. This service may set cookies on your device and collect information about your browsing patterns. You can opt out of Google Analytics tracking by using browser extensions or adjusting your cookie preferences.

Email Addresses

We collect email addresses in the following scenarios:

• Contact inquiries: If you contact us via email, we use your email address solely to respond to your inquiry
• Scan pack purchases: For customers who purchase scan packs, we store your email address (encrypted using industry-standard encryption) to provide access to your scan dashboard, purchase history, and to send transactional emails related to your purchase
• FontMonitor subscriptions: Enterprise customers who set up FontMonitor scheduled scans receive automated email notifications about their scan results, including alerts for font changes detected on their monitored websites

We will never:

• Add your email to marketing mailing lists without explicit consent
• Use your email for promotional or advertising purposes
• Sell your email address to any third party

Your email address is shared only with our third-party service providers (such as Mailgun for email delivery and Stripe for payment processing) as necessary to operate the service. See the Third-Party Service Providers section below for details.

When We May Contact You

We may contact you by email in the following circumstances:

• To deliver scan results and payment confirmations related to your purchases
• FontMonitor alerts: Automated notifications when scheduled scans detect font changes (new fonts, removed fonts, or provider changes) on your monitored websites
• Licence expiry alerts: Notifications when font licences you have recorded are approaching expiry or have expired
• To notify you if your scan credits are exhausted or approaching expiration
• To provide proactive assistance with technical issues we detect – such as problems with your account, failed scans, or issues with your payment key
• In response to support requests or inquiries you initiate

All such communications are service-related and not promotional in nature.

Managing Email Notifications

FontMonitor customers can manage their email notification preferences at any time through their scan dashboard, including the ability to:

• Choose which types of font changes trigger email alerts
• Enable or disable licence expiry notifications
• Skip email notifications when no changes are detected
• Disable all FontMonitor email notifications entirely

What We Don't Collect

FontReport does not:

• Require user accounts or registration for free scans
• Store personal information beyond what's described in this policy
• Track users across different websites
• Sell personal information to third parties for marketing or advertising purposes

Data Security

We implement appropriate technical measures to protect any information we process, including secure file storage and access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

Free scans: Scan reports are stored for up to 7 days for sharing and reference, then automatically deleted.

Starter and Agency scan packs: Scan reports are stored for up to 90 days to enable access through your scan dashboard.

Enterprise plans: Scan reports (including FontMonitor scheduled scan history and any font licensing information you have provided) are stored for up to 365 days.

Font licensing overrides: Licence status, notes, and renewal dates you add to fonts are retained for as long as your account is active. You can remove them at any time from your scan reports.

Rate limiting data and server logs: Automatically deleted after up to 30 days.

Google Analytics data: Subject to Google's own data retention policies.

How We Use Scan Results

Your scan results are not shared with unrelated third parties. Our team may access scan results – including the scanned URL and associated account email – for the following purposes:

• Debugging and resolving technical issues
• Quality assurance and verifying the accuracy of font detection results
• Improving font matching algorithms and the overall service – our team periodically reviews scan results to identify opportunities to improve font identification accuracy
• Responding to your support requests or troubleshooting assistance

This access is limited to authorised FontReport personnel and is carried out solely to maintain and improve the service.

Payment Information

FontReport does not store any credit card or payment information. All payment processing is handled securely by Stripe, our third-party payment processor. Stripe maintains PCI DSS compliance and industry-leading security standards for all payment data.

Enterprise customers may also pay by alternative methods such as bank transfer or invoice. In these cases, we may collect and retain billing details (such as business name and billing address) as necessary to process payment and issue invoices.

Third-Party Service Providers

We use the following third-party service providers to operate FontReport. These providers may process personal information on our behalf:

• Stripe (United States) – payment processing. Stripe receives your email address and payment details when you purchase a scan pack. Stripe maintains PCI DSS compliance. See Stripe's Privacy Policy.
• Mailgun (United States) – email delivery. Mailgun processes your email address to deliver transactional emails such as payment confirmations, scan results, and FontMonitor alerts. See Mailgun's Privacy Policy.
• Google Analytics (United States) – website analytics. Google Analytics may set cookies and collect browsing data. See Google's Privacy Policy.

We do not sell personal information to any third party. Information is shared with these providers only as necessary to deliver and operate the FontReport service.

Cross-Border Data Disclosure

Personal information collected by FontReport may be transferred to and processed in the following countries:

• Singapore – our servers are hosted in Singapore
• United States – Stripe, Mailgun, and Google Analytics are based in the United States

By using FontReport, you acknowledge that your personal information may be transferred to these countries. While we take reasonable steps to ensure our third-party providers handle your information in accordance with the Australian Privacy Principles, privacy laws in these countries may differ from Australian law.

Access and Correction

You have the right to:

• Access the personal information we hold about you
• Request correction of any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading
• Request deletion of your personal information, subject to any legal obligations we may have to retain it

To make an access or correction request, please contact us at hello@fontreport.com. We will respond to your request within 30 days. There is no charge for making a request or for the correction of information. If we refuse a request, we will provide you with written reasons.

Paid customers can also delete individual scan reports directly from their scan dashboard.

Complaints

If you believe we have mishandled your personal information, you may lodge a complaint by emailing us at hello@fontreport.com. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days.

Changes to This Policy

We may update this privacy policy from time to time. Where changes are material, we will take reasonable steps to notify affected users (for example, by posting a notice on our website or emailing customers with active scan packs). Any changes will be posted on this page with an updated revision date. Your continued use of FontReport after changes are posted constitutes acceptance of the updated policy.

Last updated: March 2026