Privacy Policy

This is the privacy policy for macOSicons.com. It's meant to be read alongside the Terms of Service and, if you use the API, the API Terms of Service.

1. Who's responsible for your data

macOSicons.com is operated by Elías Ruiz Monserrat, based in Spain, as an individual — I'm the data controller for the personal data described in this policy. This policy explains what I collect, why, who I share it with, and the rights you have over it. It applies to the site, the macOSicons API, and the icon editor.

2. What data I collect

Depending on how you use macOSicons, I collect:

• Account data: your email address and account identifiers, handled through the authentication system that powers sign-in.
• Content you submit: icons and their metadata (name, credit, description), and documents and projects you create in the icon editor.
• AI feature inputs: prompts and images you submit to the editor's AI-assisted tools (image generation, chat assistant).
• Payment data: handled entirely by Stripe when you subscribe to a paid plan. I receive confirmation that a payment succeeded and your subscription status, not your full card details.
• Technical and usage data: IP address, browser and device information, pages visited, and error logs, collected automatically as you use the site.

3. Why I process your data

• To provide the service you asked for — your account, icon submissions, editor documents, and paid subscriptions — I process your data to perform our contract.
• To keep the service secure and working, monitor and fix errors, and understand how features are used, I rely on my legitimate interest in running and improving macOSicons, balanced against your rights.
• To bill you for a paid plan and keep the records tax law requires, I process data to comply with legal obligations.

4. Who I share your data with

I don't sell your personal data. I share it only with the processors that help me run the service:

• Stripe, to process payments for paid plans.
• AI model providers, accessed through a proxy I run, to power the editor's image-generation and chat features. The specific provider behind a given feature can change as I improve the editor; whichever one is in use only receives the prompts and images you submit to that feature.
• Sentry, for error monitoring, so I can detect and fix bugs.
• Plausible Analytics and Microsoft Clarity, for privacy-conscious, aggregated site and product analytics.
• Infrastructure providers that host the database, file storage, and search index behind the service.

5. Your rights

Under the GDPR, you have the right to access, correct, delete, or export your personal data, to restrict or object to some processing, and to withdraw consent where processing relies on it. To exercise any of these, email me at the address below. If you're not satisfied with how I've handled a request, you can lodge a complaint with your local data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

6. How long I keep your data

I keep your account and content data for as long as your account is active. If you delete your account, I delete your personal data and submissions within a reasonable time, except where I need to keep something longer for legal, tax, or fraud-prevention reasons (for example, billing records via Stripe).

7. International data transfers

Some of the processors listed above (for example, the AI model provider and error-monitoring service) may process data outside the European Economic Area, including in the United States. Where that happens, I rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your data.

8. Cookies and similar technologies

Plausible Analytics, which I use for site analytics, doesn't use cookies. Microsoft Clarity, which I use to understand how people use the editor, may set cookies and use local storage to recognize repeat visits. You can block these in your browser without affecting core functionality; doing so may reduce the quality of my usage insights but won't stop you from using the service.

9. Children's privacy

macOSicons is not directed at children under 16, and I don't knowingly collect personal data from them. If you believe a child has provided me with personal data, contact me and I'll delete it.

10. Changes to this policy

I may update this policy from time to time, for example when I add a new feature or change a processor. When I do, I'll update the date at the top of this page, and for material changes I'll post a notice on the site.

11. Contact

For any question about this policy or to exercise your rights, email me at elias.ruiz.monserrat@gmail.com.