Files
font-tools/docs/PRIVACY-SECURITY.md
T
2026-09-01 14:35:39 +02:00

12 lines
620 B
Markdown

# Privacy and security
Font bytes, preview text and generated output stay in memory. There is no
telemetry, URL import, remote font lookup or automatic upload. Explicit local
downloads are the only output. Parsing uses strict size/table/expansion/glyph
caps, a disposable worker and a deadline. User metadata is rendered as text;
preview HTML is escaped and confined to a scriptless sandbox.
The OS/2 `fsType` field is technical metadata, not legal advice. Font Tools
blocks subsetting when it declares restricted embedding, no-subsetting or
bitmap-only embedding, but users must still comply with the actual licence.