Privacy
Last updated October 11, 2026
Who is responsible
Project TFB LLC is the controller of the personal data described here. Address: 4861 Citrine Ave., Virginia Beach, VA 23462, United States. Privacy questions and requests: saul@projecttfb.com.
The short version
Your conversations, documents, colors, fonts and settings are kept on your Mac, not on our servers. We hold your email address and the state of your Student Pass so you can sign in and use what you paid for. Paddle handles payment details. What you ask the Guide and the Mentor goes to an AI service to be answered. We never sell personal data.
What we collect, why, and for how long
| What | Why, and the legal basis | How long |
|---|---|---|
| Your email address and sign-in codes (Student Pass) | To sign you in without a password and link the pass you bought to you. Contract. | While you have a pass, and 12 months after it ends, unless you ask us to delete it sooner. |
| Your pass: plan, status, renewal date | To give you the access you paid for. Contract. | As above. |
| Order records from Paddle (email, plan, amounts, dates) | To keep accounts and meet tax duties. Legal obligation. | As long as tax and accounting law requires. |
| What you send the Guide and the Mentor: your words, and pictures or files you attach | To write the answer you asked for. Contract. We do not keep copies on our servers. | Not stored by us; kept on your Mac in your conversations. The AI service handles it under its own policy. |
| Emails you send us | To answer you. Legitimate interest in supporting our users. | Until your question is resolved, then up to two years. |
| Technical requests (IP address, time, what was requested) when you visit this site, download the app, check for updates or load fonts | To deliver and protect the site and the app. Legitimate interest. | Kept by the providers below under their own policies. |
On your Mac, the app also keeps a list of your last 50 actions (not what you typed) so a crash report can say what you were doing. It stays on your Mac.
Who receives it
- Paddle (Paddle.com), our Merchant of Record, which collects your payment details, billing country and tax information and processes every order. See Paddle’s privacy policy.
- Supabase, which hosts our account database and sends your sign-in codes.
- OpenRouter, which passes what you send the Guide and the Mentor to the AI model that answers it (currently Google’s Gemini), and holds the AI key that comes with your pass. The key carries an internal number, not your name.
- Cloudflare, which hosts this website, and Google, which hosts our email and serves the fonts the site and the app load.
- Professional advisers, and authorities when the law requires it.
Some of these providers process data outside your country, including in the United States. Where the law requires it, they rely on recognized safeguards such as standard contractual clauses.
Cookies
This website sets no cookies of its own and uses no analytics or advertising trackers. Cloudflare may set a strictly necessary security cookie to protect the site from abuse. The checkout page loads Paddle’s payment form, which may set cookies Paddle needs for payment and fraud prevention, under Paddle’s privacy policy.
Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, limit or object to how we use it, or receive a copy to take elsewhere. Email saul@projecttfb.com; we answer within one month. You can also complain to the data protection authority where you live.
Security
Data travels over encrypted connections, account data sits behind access controls, and only Saul Lowery, for Project TFB LLC, can reach it.
Children
La Font Student is made for college design students and is not directed to children under 16.
Changes
If this notice changes, the date at the top changes with it.