Version 1.0

MICRtype Privacy Policy

Version 1.0. Effective October 27, 2026. Meridian Design, LLC ("Meridian", "we" or "us") operates micrtype.com. This policy explains what we collect, why we collect it, who receives it, and the choices you have.

1. Summary

  • Our analytics run on our own server, set no cookies, and store nothing that identifies you. We use no advertising trackers.
  • An account needs only an email address. There are no passwords.
  • Payments are handled by Polar, our merchant of record. We never see your card number.
  • We do not sell personal data and do not share it for advertising.
  • You can ask us to delete your account at any time.

2. What we collect and why

2.1 Your account

To sign in, you give us your email address and we send it a 6-digit code. We keep the code for up to 5 minutes, or until you use it, then delete it. When you sign in we create a session record with your IP address, your browser's user agent string and the time. We store a name only if you give us one. We use this data to sign you in, to protect accounts against abuse, and to show you the licenses that belong to your email.

2.2 Purchases

Purchases are handled by Polar, our merchant of record. At sign-up or checkout we send Polar your email address, your name if we have one, and your account ID so Polar can match your orders to your account. Polar collects your billing name, address, payment method and tax details under its own privacy policy, and Polar emails your receipt, license key and download links. When you use the site we ask Polar whether your account holds a license. We do not keep a copy of your orders or payment details.

2.3 Generated files

When you cut a custom instance or download a calibration sheet, your account name or email address is sent to our font service so it can stamp the file with your name as the licensee. The font service builds the file and returns it. It stores nothing.

2.4 Support

The support chat is provided by Fernand and its script loads on every page. If you are signed in and open your account page, we tell Fernand your name or email address, your email address and a hashed identifier so your conversation is linked to your account. Messages you send in the chat are stored by Fernand. Quote requests for OEM licensing use a form hosted by Tally. We send Tally nothing about you; Tally receives only what you type into the form.

2.5 Technical data

Our hosting providers, Vercel and Railway, keep server logs that record requests, IP addresses and errors for a limited time so we can run the site and fix problems. In two cases an email address can appear in a log: when linking your account to Polar fails, and when you download a calibration sheet.

2.6 Analytics

We run our own copy of Umami, an open-source analytics tool, on our own server. It counts page views, referring sites, browser, device type and the country your IP address resolves to. It sets no cookies, does not store your IP address, and keeps no identifier that lasts past the end of the day. It does not follow you to other sites. It honors your browser's Do Not Track setting.

2.7 What we do not collect

  • No third-party analytics and no advertising identifiers.
  • No tracking across other websites or apps.
  • No card numbers or bank details. Those go to Polar.
  • No data from children that we know of. See section 11.

3. Cookies and local storage

  • Session cookie: better-auth.session_token keeps you signed in. It lasts 7 days, renews when you use the site, and is strictly necessary for your account.
  • Theme: your light or dark mode choice is kept in your browser's local storage under the key "theme". It never leaves your browser.
  • Checkout: Polar and Stripe set their own cookies inside the checkout window, only once you open it.
  • Support chat: the Fernand widget may set cookies. See Fernand's privacy policy below.
  • Analytics: Umami sets no cookies.

We show no cookie banner because nothing on the site is used for advertising, and our analytics are cookieless and anonymous. You can clear cookies and local storage with your browser's controls; doing so signs you out.

4. Who receives your data

We use these companies to run the site. Each one receives only what it needs for its job and is bound by its own privacy policy.

Umami is software we run ourselves. No analytics company receives your data.

We may also disclose personal data when the law requires it, to protect the site and our customers against fraud or abuse, or as part of a sale or merger of Meridian, in which case this policy continues to apply to the data transferred. We never sell personal data and never share it for advertising.

5. Where data is stored

Our servers and our providers are in the United States. If you visit from another country, your data is sent to and processed in the United States. Section 9 explains the legal basis for that transfer if you are in Europe or the United Kingdom.

6. How long we keep it

  • Analytics are aggregated as they arrive. The daily visitor hash cannot be traced back to you once the day ends.
  • Sign-in codes: 5 minutes, or until used.
  • Sessions: 7 days from your last visit. Signing out removes the session at once.
  • Account record (email, name if given): until you ask us to delete it.
  • Hosting and error logs: a limited period set by Vercel and Railway, typically under 90 days.
  • Order and tax records: kept by Polar for as long as tax and accounting law requires.

7. Your choices and rights

You can ask us to see, correct, export or delete the personal data we hold about you. Contact us through the support chat on micrtype.com and we will answer within 30 days. Deleting your account removes your email address, your sessions and the link between your account and your Polar customer record. Polar keeps order and tax records as the law requires, and you can manage those with Polar directly. You can sign out at any time, and your browser controls cookies and local storage.

8. Security

The site is served over HTTPS only. We use emailed sign-in codes instead of passwords, so there is no password for anyone to steal. Our own services talk to each other with secret tokens, and access to customer data is limited to Meridian. No system is perfectly secure. If you believe your account has been misused, tell us through the support chat.

9. If you are in the EU, EEA, UK or Switzerland

The data controller is Meridian Design, LLC, South Carolina, United States of America. We process your data on these legal bases: performance of a contract for your account, your purchases and the files you generate; our legitimate interests in securing the site, keeping logs, measuring visits anonymously and answering support requests; and your consent where we ask for it. You have the right to access, correct, erase, restrict or object to the processing of your personal data, to receive it in a portable form, and to complain to your supervisory authority. Your data is processed in the United States. Our providers rely on Standard Contractual Clauses, or on the EU-US Data Privacy Framework where they are certified, for that transfer. We make no automated decisions about you that have legal effect.

10. If you are in California

In the past 12 months we have collected these categories of personal information: identifiers (email address, IP address, account ID), commercial information (orders and license status, held by Polar), and internet activity (server logs and anonymous analytics). We use them for the purposes in section 2. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months, so no "Do Not Sell or Share" link is needed. You have the right to know what we hold, to correct it, to delete it, and not to be treated differently for exercising those rights. To exercise them, contact us through the support chat on micrtype.com.

11. Children

MICRtype is sold to businesses and adults. The site is not directed at anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, tell us through the support chat and we will delete it.

12. Changes to this policy

The version and effective date are at the top of this page. If we make a material change, we will announce it on the site or email account holders. Using the site after a change takes effect means you accept the updated policy.

13. Contact

Meridian Design, LLC. Reach us through the support chat on micrtype.com.