Privacy Policy

Last updated: February 2025

1. Introduction

This Privacy Policy describes how Watermark.pro ("we", "us", "our") collects, uses, and protects information when you use our website and services. We are committed to protecting your privacy and being transparent about our data practices.

2. Image Processing

Watermark.pro processes all images entirely in your browser using client-side JavaScript. Your images are never uploaded to, transmitted to, or stored on our servers. We have no access to any images you edit using the Service. Once you close or refresh the page, all image data is cleared from your browser's memory.

3. Information We Collect

3.1 Newsletter Subscription

When you subscribe to our newsletter, we collect:

  • Your email address;
  • Your IP address (for anti-spam protection and rate limiting);
  • The date and time of subscription.

3.2 Contact Form

When you submit our contact form, we collect:

  • Your name and email address;
  • The subject and content of your message;
  • Your IP address (for anti-spam protection and rate limiting);
  • The date and time of submission.

3.3 Local Storage

We use your browser's localStorage to save:

  • Your font favorites and recent selections;
  • Your watermark templates.

This data is stored only on your device and is never transmitted to our servers.

3.4 Server Logs

Like most websites, our web server may automatically collect standard log data, including your IP address, browser type, referring page, and pages visited. This data is used solely for maintaining the security and performance of the Service.

4. How We Use Your Information

We use the collected information for the following purposes:

  • Newsletter emails: to send you updates, tips, and news about Watermark.pro;
  • Contact form messages: to respond to your inquiries and provide support;
  • IP addresses: to enforce rate limits, prevent abuse, and protect against spam;
  • Server logs: to monitor service health, detect security threats, and troubleshoot issues.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data on the following legal bases:

  • Consent: for newsletter subscriptions (you may withdraw consent at any time);
  • Legitimate interest: for anti-spam protection, rate limiting, server logs, and service security;
  • Contract performance: for responding to contact form inquiries.

6. Cookies

Watermark.pro does not use tracking cookies, advertising cookies, or any third-party analytics cookies. We use only essential browser features (localStorage and session cookies for the admin area) that are strictly necessary for the Service to function.

7. Third-Party Services

The Service may load fonts from Google Fonts on demand when you select a custom font. When this occurs, your browser makes a request to Google's servers, which is subject to Google's Privacy Policy. No other third-party services are integrated into the public-facing Service.

8. Data Retention

  • Newsletter data: retained until you unsubscribe. Upon unsubscription, your record is marked as inactive but retained for up to 12 months to prevent duplicate re-subscription issues, after which it may be permanently deleted;
  • Contact form logs: IP-based rate limiting logs are retained for 24 hours and then automatically discarded. The email sent to us is retained in our mailbox as needed to handle your inquiry;
  • Server logs: retained for up to 90 days;
  • localStorage data: persists on your device until you clear your browser data.

9. Data Security

We take reasonable technical and organizational measures to protect your personal information, including:

  • HTTPS encryption for all data in transit;
  • Rate limiting and anti-spam measures on all public endpoints;
  • Password-protected admin access with session security;
  • Database access restricted at the server level.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the personal data we hold about you;
  • Rectification: request correction of inaccurate personal data;
  • Erasure: request deletion of your personal data ("right to be forgotten");
  • Restriction: request that we restrict processing of your personal data;
  • Portability: request your data in a structured, machine-readable format;
  • Objection: object to the processing of your personal data;
  • Withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via our contact page. We will respond to your request within 30 days.

11. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

12. International Data Transfers

Our servers are located in Europe. If you access the Service from outside the European Economic Area, please be aware that your information may be transferred to and processed in a country with different data protection laws. By using the Service, you consent to such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the "Last updated" date revised accordingly. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via our contact page.