Privacy Policy

Last updated: April 2026 (Sentry error monitoring disclosure)

1. What Data We Collect

  • Email address (when registering for an API key)
  • API usage logs (number of optimizations, file sizes, timestamps)
  • IP addresses (anonymized after 30 days)

2. Uploaded SVG Files

SVG files are processed in memory and not permanently stored. A content hash (SHA256) of each file is cached for up to 30 days to avoid redundant processing. The hash cannot be used to reconstruct the original file.

3. No Selling, No Advertising

We do not sell your data, share it for advertising, or use it for profiling. Aggregated and de-identified technical data may be sent to our error-monitoring provider (see §4) so we can keep the service stable and fix bugs you encounter.

4. Error & Performance Monitoring (Sentry)

We use Sentry (operated by Functional Software, Inc., d/b/a Sentry) to capture JavaScript errors in the browser and exceptions on our backend. Events are sent to Sentry's EU region (de.sentry.io), so personal data does not leave the European Economic Area.

What is sent to Sentry:

  • Error message and stack trace
  • Browser type, version, operating system, viewport size
  • The URL of the page on which the error occurred
  • Performance timing for ~5 % of page loads (sampled)

What is explicitly NOT sent to Sentry:

  • IP addresses (sendDefaultPii: false)
  • Cookies, session tokens, or API keys
  • SVG file content you paste, drag, or upload
  • Authorization headers

Sentry retains events for up to 90 days. Your browser's Do-Not-Track setting is honoured: if it is enabled, Sentry will not be initialised and no events will be sent from your session.

5. Data Retention

  • Usage logs: 12 months
  • Account data: until deletion requested
  • Optimization cache: 30 days
  • IP addresses: anonymized after 30 days
  • Sentry error events: 90 days

6. Your Rights (GDPR)

You have the right to access, correct, or delete your personal data. You may also request data portability or object to data processing. Contact us at the address below.

7. Responsible Entity & Contact

The data controller within the meaning of the GDPR is Fasterminds GmbH. Full contact details and company information can be found in our Legal Notice.