Privacy Policy

IconVault ("we", "us", "our") runs a free online icon library and free online tools at iconvault.site. This policy explains what information we collect when you use the site, how we use it, and the choices you have. By using IconVault you agree to this policy.

Account information. If you create an account, we store the email address and display name you provide, plus the authentication session managed by our auth provider, Supabase. We use this to sign you in, sync your favourites and collections across devices, and manage your plan.

Usage analytics. We store anonymised page-view analytics in our own Supabase database. This tells us which pages and tools are used so we can fix bugs and prioritise features. It is first-party: we do not share it with advertisers or data brokers.

Tool usage counts. The 5 free uses per tool are counted in your browser's localStorage on your own device, not on our servers. Clearing your browser storage resets the count.

Payment information. Payments are processed by Dodo Payments on their hosted checkout. We never see, store or process your card numbers: Dodo handles the payment details and tells us only that the payment succeeded and which plan you bought.

What we do not collect. We do not run third-party ad trackers, we do not fingerprint your device, and we do not buy or sell personal data.

IconVault uses a small number of first-party cookies and storage entries:

• Auth session: keeps you signed in (required for accounts).
• Cookie-consent choice: remembers whether you accepted our cookie banner.
• Preferences: theme, recent searches and tool settings, stored locally in your browser.

We do not set third-party advertising or tracking cookies. You can block or delete cookies in your browser settings, though signing in will stop working without the session cookie.

• To provide the service: sign-in, favourites, collections and plan status.
• To process Pro payments through Dodo Payments and unlock your plan.
• To understand aggregate usage and improve the site.
• To reply when you contact us, for example about a refund or a bug.

We do not use your data for advertising, and we do not share it with third parties except our infrastructure providers (Supabase for auth and data, Dodo Payments for billing), who process it only to run the service.

Account data is kept while your account exists and deleted when you delete your account. Aggregate analytics are kept for up to 24 months, then rolled up or removed. Payment records are kept by Dodo Payments under their own policy; we keep only a record of which plan is active on your account.

You can, at any time:

• View and edit your profile from your account page.
• Ask for a copy of the personal data we hold about you.
• Ask us to correct or delete your data by writing to us.
• Delete your account from the account page, which removes your stored data.
• Withdraw cookie consent by clearing cookies or changing your browser settings.

To exercise any of these, write to info@iconvault.site. We reply to privacy requests within 30 days.

Data travels over HTTPS, passwords are handled by Supabase's authentication service (we never store them ourselves), and access to production data is limited. No system is perfectly secure, so if you suspect a problem with your account, contact us immediately.

IconVault is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the service changes. The "Last updated" date at the top always shows the current version, and material changes will be announced on the site. Continued use after a change means you accept the new policy.

Questions about this policy or your data: info@iconvault.site.

Related reading: Terms & Conditions.