Privacy Policy
This Privacy Policy explains how Payment Method Builder collects, uses, and protects information when you use our service.
1. Who We Are
Payment Method Builder ("we", "us", "our") is a free, client-side web application that allows designers and developers to configure and export payment method icon sets for use on their websites. The service is operated by:
Free Content ifPNG
Contact: …
For the purposes of the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), we are the data controller in respect of any personal data processed through this service.
2. What Data We Collect — and What We Don't
2.1 Data We Do Not Collect
Payment Method Builder is a purely client-side tool. We do not:
- Require you to create an account or register.
- Collect your name, email address, or any other contact details.
- Store your builder configuration on our servers. The builder runs entirely in your browser, and exported output is generated locally on your device.
- Process payment or financial information of any kind.
- Use tracking pixels, fingerprinting, or cross-site tracking techniques.
2.2 Future Analytics Integration (Not Active Today)
If analytics is enabled in the future and you have given consent, Google Analytics 4 (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) collects the following categories of data on our behalf:
- Device and browser information: browser type and version, operating system, device type (desktop/tablet/mobile), screen resolution.
- Usage data: pages visited, time spent on pages, interactions with the builder (e.g. icons selected, export format chosen), referring website.
- Network information: truncated IP address (the last octet is anonymised before storage), approximate geographic location at country and city level.
- Session identifiers: assigned via first-party cookies (see our Cookie Policy).
This data is processed by Google on servers that may be located outside the European Economic Area (EEA), including in the United States, under the EU–US Data Privacy Framework. You can review Google's privacy practices at policies.google.com/privacy.
2.3 Server / Infrastructure Logs
Our hosting provider automatically records standard web-server access logs, which may include your IP address, browser user-agent string, request timestamp, and HTTP status code. These logs are retained for a maximum of 30 days for security and abuse-prevention purposes and are not used for marketing or profiling. We do not have access to individual log entries in the normal course of operation.
3. Legal Basis for Processing
| Processing Activity | Legal Basis (GDPR Art. 6) | Details |
|---|---|---|
| Serving the web application | Article 6(1)(f) – Legitimate interest | Necessary to deliver the requested service; no personal data is retained. |
| Infrastructure / server logs | Article 6(1)(f) – Legitimate interest | Security monitoring and abuse prevention; short retention, minimal data. |
| Google Analytics (only if enabled in a future deployment) | Article 6(1)(a) – Consent | Only activated after you provide freely given, specific, informed, and unambiguous consent via the cookie banner. |
4. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Server access logs | Up to 30 days, then automatically deleted. |
| Google Analytics — aggregated reports (if enabled) | 14 months (configurable; we apply the shortest available Google Analytics retention window). |
| Google Analytics — raw event data (if enabled) | 2 months before automatic aggregation. |
| Local consent preferences (if optional cookies are enabled) | Until you clear your browser data. We have no direct access to this browser-local state. |
5. Sharing and Transfers of Your Data
We do not sell, rent, or trade your personal data. Data may be shared only in the following cases:
- Google LLC — only if analytics is enabled, as analytics processor under a Data Processing Agreement and the EU–US Data Privacy Framework.
- Hosting provider — processes infrastructure logs; bound by our contractual data processing terms.
- Legal obligation — if required by a court order or applicable law, we may disclose data to competent authorities.
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or an applicable adequacy decision).
6. Your Rights Under the GDPR
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:
- Right of access (Art. 15): you may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): you may ask us to correct inaccurate data.
- Right to erasure (Art. 17): you may ask us to delete your personal data where there is no compelling reason for its continued processing.
- Right to restriction (Art. 18): you may ask us to restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20): you may receive your data in a structured, machine-readable format.
- Right to object (Art. 21): you may object to processing based on legitimate interests at any time.
- Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. You can do this via the cookie banner on our site or by clearing the relevant cookies from your browser.
To exercise any of these rights, please contact us at …. We will respond within 30 days.
You also have the right to lodge a complaint with your national supervisory authority. In the EU, a list of authorities is available at edpb.europa.eu.
7. Cookies
We use optional cookies only for the categories marked active in our cookie registry. For a full breakdown of every cookie used, including its provider, purpose, and duration, please read our Cookie Policy.
8. Children's Privacy
This service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy when we add new services, change our data practices, or when required by law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
10. Contact
For any privacy-related queries or to exercise your rights, contact us at:
…