agentfonts / privacy
working draft · last updated 12 November 2026

Privacy policy.

The controller is Fredrik Gustafsson (sole trader), Färjestaden, Sweden, who runs Agentfonts. Contact: info@agentfonts.com. Agentfonts collects as little as it can: no accounts for buyers, no tracking, no advertising cookies.

// what we handle and why
  1. Buying a licence. The licensee's name, email, optional organisation or VAT number and country, given by the buyer or the agent acting for them. Used to issue the licence, to prove it later and for bookkeeping. Legal basis: performing the licence agreement, and our legal obligation to keep accounts.
  2. Payment. The paying wallet address, amount and transaction hash. Payments settle on the public Base blockchain, so these are public by nature and cannot be deleted from it.
  3. Selling fonts. A foundry's name, domain, contact email and payout wallet, its uploaded font files and their metadata, and its sales and payouts. Legal basis: the agreement with the foundry and our bookkeeping obligation.
  4. Reports. The reason and contact details given when someone reports a font, used to handle the report.
  5. Technical logs. Our hosting provider records requests (time, path, status and IP address) for security and troubleshooting. Legal basis: our legitimate interest in running a secure service.
  6. MCP tools. Searching, previewing and quoting need no personal data. Only buy_license receives licensee details.
  7. In your browser. The foundry dashboard keeps your API key in your browser's local storage so you stay signed in; signing out removes it. No analytics or advertising cookies are used.
// who else processes it
  1. Railway hosts the service, its database and font file storage, in the EU (Netherlands region).
  2. Coinbase Developer Platform verifies and settles x402 payments and receives the signed payment, not the licensee's details. It may list the paid endpoint (not personal data) in its x402 Bazaar index.
  3. Cloudflare provides DNS and forwards email sent to info@agentfonts.com.
  4. The licensed foundry receives the sale's licensee details when needed to answer licensing questions or disputes.
  5. Some providers may process data outside the EU/EEA under the EU's standard contractual clauses or an adequacy decision. We do not sell personal data.
// how long
  1. Sales and licence records: seven years after the end of the financial year, as Swedish bookkeeping law requires. The signed licence token itself is held by the licensee.
  2. Foundry accounts: while the account is active, then as long as the bookkeeping rules require for its sales and payouts.
  3. Reports: as long as needed to handle them, at most two years.
  4. Technical logs: kept by the hosting provider for a limited period, typically weeks.
// your rights
  1. You may ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and move it elsewhere, within what the law allows. Bookkeeping records cannot be deleted before their retention period ends, and blockchain transactions cannot be deleted at all.
  2. Write to info@agentfonts.com. We answer within one month.
  3. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.