Privacy
Updated 12 October 2026.
Who we are
The Font Library is a font manager for the Mac, made by Mike Patterson. This page covers the app, this website (fontlibrary.app) and the server behind both (api.fontlibrary.app). Questions and requests go to hello@fontlibrary.app.
What never leaves your Mac
Your font files, your library (families, collections, favourites, notes) and your searches stay on your Mac. The app searches its catalogue on the Mac itself; nothing you type into it is sent anywhere.
Your account
You sign in with Google or GitHub. From them we keep your name, your email address and your avatar, and which of the two you used. We never post anything for you and never see your repositories, files or contacts. The account exists so the app can download its catalogue and so we can let people into the beta.
Sessions
Each signed-in Mac or browser is a session. A session stores the IP address and the browser's or app's user agent at sign-in, so you can tell your Macs apart on My page and sign any of them out. Sessions last 90 days unless you sign out or revoke them sooner.
The waitlist
When you join the list we keep your email address, your name if you gave one, the note on what you make if you wrote one, and when you joined, were invited and signed up. We use the address to tell you that you are on the list and, later, that you are in. That is the only email you get. The entry stays until you ask us to remove it.
Crash reports
Off until you turn them on in the app (Settings → General). When on, a crash or an error sends a report to Sentry: what failed, where in the code, the app version and your account's id. Before it leaves the Mac every report is scrubbed: file paths, anything in quotes (which is where font names appear) and sign-in tokens in links are removed, and nothing about you is kept beyond the account id. Reports carry no IP address field, no cookies and no screen contents. Turn it off and nothing more is sent.
This website
Page views are counted with Cloudflare Web Analytics, which sets no cookies and stores no IP address. On top of that we count three button presses ourselves: joining the list, starting a sign-in and downloading the app. Each count stores the name of the button, the day and the country the request came from. No IP address, no device, nothing that could tell two people apart. There is no cookie banner because there is nothing to consent to: the only cookies are the ones signing in needs, set when you sign in.
The bot check on the join form
The join form uses Cloudflare Turnstile in invisible mode to keep bots off the list. Turnstile looks at signals from your browser to tell people from bots; it sets no tracking cookies and the data is not used for advertising. Cloudflare processes that data under its Turnstile Privacy Addendum, which applies to your use of the form.
Who handles the data
- Cloudflare runs the server, the database, the bot check and the page-view counts.
- Vercel hosts this website and keeps short-lived request logs.
- Resend sends the two emails.
- Sentry receives crash reports, only when you have turned them on.
- Google and GitHub sign you in.
- GitHub serves the downloads and the app's update checks.
We do not sell data, show ads or share anything with anyone else.
Deleting your data
There is no delete button yet. Email hello@fontlibrary.app from the address on your account or on the list, and we remove the account, its sessions and the waitlist entry within 30 days and reply when it is done. You can sign out every Mac yourself on My page at any time.
Changes
When this page changes, the date at the top changes. If a change affects what we collect, we say so by email to the people on the list and in the app before it takes effect.