620 B
620 B
Privacy and security
Font bytes, preview text and generated output stay in memory. There is no telemetry, URL import, remote font lookup or automatic upload. Explicit local downloads are the only output. Parsing uses strict size/table/expansion/glyph caps, a disposable worker and a deadline. User metadata is rendered as text; preview HTML is escaped and confined to a scriptless sandbox.
The OS/2 fsType field is technical metadata, not legal advice. Font Tools
blocks subsetting when it declares restricted embedding, no-subsetting or
bitmap-only embedding, but users must still comply with the actual licence.