font.zmize · operated by ZMIZE PTY LTD
Effective 2026-10-11 · last updated 2026-10-11
This policy covers font.zmize at https://font.zmize.com and the service behind it. It is written to be read, not to be survived. If a sentence here is unclear, email privacy@zmize.com and we will fix the wording.
font.zmize is operated by ZMIZE PTY LTD, a company registered in Australia (ACN 702 427 816). Our postal address is available on request from privacy@zmize.com. For anything in this policy, the contact is privacy@zmize.com.
For the purposes of the GDPR and the UK GDPR, ZMIZE PTY LTD is the data controller for the personal data described in this policy.
font.zmize identifies typefaces and suggests open-source lookalikes. It is not affiliated with, endorsed by, or acting for any type foundry, and naming a commercial typeface in a result is a statement about visual similarity, not a claim about that foundry or its licence terms.
Everything we collect is listed here. If it is not in this table, we do not collect it.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| The font file you upload | To fingerprint it and find open-source lookalikes — the thing you asked for | Legitimate interests (performing the analysis you requested) | Indefinitely — nothing deletes it automatically |
| The analysis result, stored under a link derived from the file's contents | So you can re-open and share the verdict | Legitimate interests | Indefinitely — nothing deletes it automatically |
| Any font synthesized from your upload, and its attribution record | So you can download the font you generated | Legitimate interests | Indefinitely — nothing deletes it automatically |
| The filename you uploaded | Shown back to you alongside the result | Legitimate interests | Stored with the result, indefinitely |
| Request logs (IP address, user agent, path, timestamp) | Security, abuse prevention and debugging | Legitimate interests | Held by our hosting platform under its own retention; we keep no separate copy |
We do not sell personal information, we do not share it with advertisers, and we do not use it to build advertising profiles.
font.zmize has no accounts of its own and no user database. Everything except the paid features works with no sign-in at all. If you do sign in, that happens at auth.zmize, our own identity service, which sets a session cookie for the whole zmize.com domain. We never see or store your password, your email address or your account identifier — we forward your session credential to auth.zmize and receive back only which features you are entitled to use.
Your uploaded font is analysed by statistical models — outline fingerprinting, image-descriptor and principal-component models — that run on our own infrastructure. Your upload is never sent to any third-party model provider, and it is never used as training data: the models are fitted in advance on an open-source font corpus and are not updated from anything you upload.
No decision with a legal or similarly significant effect on you is made about you by automated means.
We use the following service providers ("subprocessors"). Each one only receives what it needs to do the job named, and each of these is bound by a contract that forbids using your data for its own purposes.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge compute, the container that runs the analysis engine, and object storage | All service data and request metadata | Global edge; durable storage in the region below |
| auth.zmize (operated by us) | Sign-in and entitlement checks | The session credential your browser sends us | Cloudflare |
| get.zmize (operated by us) | Early-access requests — only if you choose to click through | Whatever you enter on that page | Cloudflare |
We also disclose information where the law requires it — a valid court order, subpoena, or equivalent legal process — and, if ZMIZE PTY LTD is ever involved in a merger, acquisition or asset sale, to the acquiring party, under terms at least as protective as this policy. We will tell you before your data moves to a new controller.
The service runs on Cloudflare's network. Durable records — the fonts you upload, their results and any fonts synthesized from them — are held in Cloudflare object storage located in Cloudflare's Oceania (OC) region. Requests are handled at Cloudflare edge locations worldwide, which is how the service stays fast wherever you are.
Because the service runs on a global edge network, your data may be processed outside your country. Where that involves personal data leaving the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses (and the UK Addendum) in our contract with Cloudflare. The public CDNs listed under Cookies are contacted directly by your browser and are outside that contractual chain — we have no agreement with them and cannot make transfer commitments on their behalf.
You can, at any time:
To exercise any of these, email privacy@zmize.com. We respond within 30 days and we do not charge for it. If you think we have handled your data badly, tell us first — and if we do not fix it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or your local data protection authority if you are in the EEA or the UK.
You have the rights listed above under Articles 15–22 of the GDPR. Our legal bases are named in the collection table. Where we rely on legitimate interests, the interest is performing the analysis you asked for and keeping the service secure, and we have assessed that it does not override your rights. You can lodge a complaint with your national supervisory authority.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. You have the right to know, delete, and correct, and not to be discriminated against for exercising those rights. Requests go to privacy@zmize.com.
We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may complain to us at privacy@zmize.com, and if you are not satisfied with our response, to the Office of the Australian Information Commissioner.
zm-theme, on your own device. It is never sent to us.fonts.googleapis.com, fonts.gstatic.com) — your browser fetches the open-source typefaces the specimen surfaces render directly from Google, which discloses your IP address and user-agent to them. Google is not our subprocessor and we have no contract with them. Your uploaded font is never sent to Google.cdn.jsdelivr.net) — your browser fetches the page's animation libraries from this public CDN, which discloses your IP address and user-agent to it. Also not our subprocessor, and no service data is sent to it.The service is a professional typography tool, is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has uploaded something identifying, email privacy@zmize.com and we will delete it.
No system is perfectly secure. If we discover a breach that is likely to put you at risk, we will notify you and the relevant regulator within the time the law requires, and we will tell you what was affected and what to do about it.
We will post any change here and move the "last updated" date. If a change materially reduces your privacy — new data collected, a new purpose, a new category of recipient — we will give you at least 14 days notice before it takes effect, so you can stop using the service or delete your data first.
Previous versions are available on request from privacy@zmize.com.
ZMIZE PTY LTD Postal address: available on request from privacy@zmize.com Privacy: privacy@zmize.com · Support: support@zmize.com