Privacy Policy

Last updated June 2026

We'll treat you the way we'd want to be treated. Your privacy matters to us, and we're not in the business of collecting more than we need or sharing what we have. This policy explains what we collect, why, and the rights you have over your information.

Positype is a type foundry and an entity of Swash & Kern LLC, based in Georgia, United States. Swash & Kern LLC is the data controller responsible for your personal data. For any privacy question, or to exercise the rights described below, contact us at support@positype.com

We only collect information you choose to give us, plus a small amount of usage data that helps us understand how the site is performing.

When you make a purchase, we collect your name, email address, company (if you provide one), and billing information to process the transaction and maintain your order history. If you subscribe to our newsletter, we collect your email address. As you use the site, our analytics collects standard usage data such as the pages you visit, your approximate location, your device and browser type, and how you arrived, through cookies (see Cookies & Analytics below). If you're just browsing and haven't interacted with us, we don't collect personal details beyond that usage data.

Your information is used to process orders, deliver font files, maintain your account, send order confirmations and receipts, and, if you've opted in, send occasional newsletters about new releases and updates. We also use aggregated analytics to understand how the site is used and to improve it. We don't sell your information, and we don't use it for advertising. Full stop.

If you're in the EU or UK, the law requires us to have a legal basis for each thing we do with your data. We rely on:

• Performance of our contract with you, to process orders, deliver fonts, maintain your account, and send confirmations and receipts.
• Your consent, to send newsletters and to set analytics cookies. You can withdraw consent at any time.
• Our legal obligations, to keep purchase and tax records.
• Our legitimate interests, to keep the site secure, prevent fraud, and understand site usage.

All payments are handled by Stripe, a PCI DSS-compliant payment processor. We never see or store your card details, they go directly to Stripe. You can read Stripe's privacy policy at stripe.com/privacy.

We work with a small number of services to run this site. Each receives only the data needed to do its job, and none of them are permitted to use your data for their own marketing:

Stripe handles payment processing.
DigitalOcean hosts the site and database.
Flodesk manages newsletter delivery, if you've subscribed.
Mailgun sends transactional email such as order confirmations, receipts, and password resets.
Google provides website analytics through Google Analytics.

We use two kinds of cookies. Essential cookies keep your cart working and your session active while you're logged in; these are always on because the site can't function without them. Analytics cookies, set through Google Analytics, help us understand which fonts and pages people visit so we can improve the site; these are optional.

Where the law requires it (in the EU and UK), we ask for your consent before setting analytics cookies, and you can change your choice at any time through our cookie settings. We don't use advertising cookies, and we don't track you across other websites.

Google Analytics is provided by Google. You can read Google's privacy policy at policies.google.com/privacy, and you can opt out of Google Analytics across all websites at tools.google.com/dlpage/gaoptout.

You can unsubscribe from our newsletter at any time using the link in any email we send.

If you're in the EU, UK, or a region with similar protections, you also have the right to access the data we hold about you, correct anything inaccurate, ask us to delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw any consent you've given. To exercise any of these, email support@positype.com, and we'll respond within one month.

You also have the right to lodge a complaint with your data protection authority (in the UK, the ICO at ico.org.uk; in the EU, your national authority) if you believe we've mishandled your data, though we'd genuinely appreciate the chance to put things right first.

Note that we're required to retain purchase records for legal and tax purposes even if you close your account.

We keep your personal data only as long as we need it: account information for as long as your account is active; order and payment records for [retention period, e.g. 6–7 years] to meet tax and legal requirements; newsletter data until you unsubscribe; and analytics data for the period set in our Google Analytics configuration [e.g. 14 months]. When we no longer need your data, we delete or anonymise it.

Personal data is encrypted in transit using SSL and stored on secured servers hosted by DigitalOcean in the United States. We take reasonable precautions to protect your information, but no system is perfectly secure.

This site isn't directed at children, and we don't knowingly collect information from anyone under 13 (or the minimum age required in your country, which can be higher in parts of the EU). If you believe a child has given us their information, contact us and we'll remove it.

We may update this policy from time to time. The Last Updated date at the top reflects when it was last changed.

Positype operates from the United States, so if you're in the EU or UK, your personal data is transferred to and processed in the US. Several of our providers, including Google and Stripe, are also based in or process data in the US. Where these transfers happen, we and our providers rely on appropriate safeguards, such as the Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework, to protect your data to the standard GDPR requires.