PRE-LAUNCH · 2026-09-16
Privacy policy
Information used
We use your email, internal order ID, payment reference and credit balances to manage passes. Access keys and session tokens are stored as hashes; PINs use salted password hashing. We store icon prompts, project names, chosen styles and colors, and the latest generated files. Security processing uses request IP addresses, failure counts and retry times. We do not collect card numbers in Iconpack.
Purpose and providers
Information is used to provide access, generate files, deliver service emails and prevent abuse. Supabase stores pass records and private files; Recraft receives the icon prompt, style and color when real generation is enabled; Resend receives email addresses and service email content when email is enabled. Hosting providers process requests and operational logs. These providers may process information outside your country. A payment provider has not yet been activated.
Retention
Latest image files expire 7 days after successful generation. Replaced files are deleted after successful regeneration; failed deletion is retried. Public hosting is configured for hourly cleanup; outages may delay physical deletion, but do not extend access. Pass records, prompt metadata and hashed credentials are retained for continued pass access until a deletion request is reviewed. No automatic retention limit is currently set for those records. Expired session/reset records may remain in the pass record but cannot authenticate.
Email links and browser storage
A pass link is temporarily encrypted for email delivery and removed from that delivery payload after successful sending. A PIN reset token is valid for 15 minutes. We use a required HttpOnly session cookie for up to 30 days, local storage for language preference and session storage for pending pass links. No advertising or analytics trackers are included in this MVP.
Requests and contact
Contact support to request access, correction or deletion of your information. We may verify control of the purchase email before acting. Deleting pass records may prevent future access to unused credits. Any record retention required for paid transactions will be disclosed before sales begin. Do not submit sensitive personal information in image prompts or send your PIN to support.