Legal
Privacy Policy
This Policy explains what information Forma processes, why it is used, and what happens when you generate a styled icon-library ZIP package.
Effective July 27, 2026
1. Scope
This Privacy Policy applies when you visit or use Forma Icon Creator (the “Service”), create an account, purchase a paid plan, or generate an export. It does not govern third-party websites or services that have their own privacy policies.
The Service was created by Elerion s.r.o. and forms part of its portfolio.
Forma acts as the controller of information used to operate the Service. Payment information handled directly by Creem or Polar is governed by the selected provider's own terms and privacy policy.
2. Information Forma processes
Account information
Your name, email address, encrypted password, account timestamps, and sign-in session information.
Purchase information
Selected plan, checkout status, entitlement status, transaction references, customer, order, and subscription identifiers received from Creem or Polar.
Design and export information
The selected icon library and styling settings, such as size, colors, gradients, padding, stroke, shadows, shine, and 3D options, plus export status and file metadata.
Device and usage information
IP address, request time, routes requested, browser or device information included in standard server logs, security events, errors, and rate-limit activity.
The Service also stores your theme and current Icon Creator preferences in your browser’s local storage so they can be restored on your device. That browser-only data is not submitted to Forma unless you use it as part of an export request.
Forma does not receive or store your full payment-card number. Creem or Polar collects and processes payment details at checkout, depending on the selected payment provider.
Pro ZIP exports
3. What happens when a styled package is generated
- Your validated design settings and chosen icon library are saved with an export record.
- A background job applies those settings to each icon and writes the resulting SVG files into a ZIP archive.
- The archive is stored in non-public application storage. When processing finishes, the Service issues a temporary signed download link.
- The export record and archive are assigned an expiry time of approximately 24 hours and are scheduled for deletion after they expire. The signed download link itself expires sooner.
Do not submit confidential, personal, or sensitive information in file names or other design fields. Forma is an export tool, not a secure document-storage service.
4. How information is used
Forma uses the information described above to:
- create and authenticate accounts;
- provide previews, exports, temporary downloads, and customer support;
- start and verify purchases and maintain Premium or Lifetime entitlements;
- secure the Service, prevent abuse, enforce rate limits, and investigate failures;
- maintain, troubleshoot, and improve reliability and performance;
- keep transaction, tax, accounting, and compliance records; and
- comply with law and enforce the Terms of Use.
Depending on where you live, these activities rely on performing a contract with you, Forma’s legitimate interests in operating and securing the Service, compliance with legal obligations, or consent where required.
6. Retention
Styled ZIP archives and their export records are designed to expire after approximately 24 hours and are removed by a scheduled cleanup process. Local browser preferences remain on your device until you clear site data or replace them.
Account and entitlement information is generally kept while your account is active and for a reasonable period afterward. Purchase, webhook, fraud-prevention, tax, and accounting records may be retained longer when needed for legal obligations, dispute resolution, audits, and enforcement. Server and error logs are retained for operational and security needs and then deleted or aggregated.
Forma may keep information longer when required by law, needed to resolve a dispute, or necessary to protect the Service. When information is no longer needed, it is deleted or de-identified.
7. Security
Forma uses administrative, technical, and organizational safeguards appropriate to the nature of the information. These include password hashing, authenticated account sessions, validation, rate limiting, private export storage, and time-limited signed download links.
No internet service or storage system is completely secure. You should use a unique password, protect your device and account, and download and remove package files from shared devices promptly.
8. Your rights and choices
Depending on your location, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; to object to or restrict certain processing; or to withdraw consent. You may also have the right to complain to your local data-protection authority.
You can clear browser-only theme and Icon Creator settings through your browser’s site-data controls. Necessary session and security cookies are required for account sign-in and checkout continuity. The current Service does not use third-party advertising cookies.
A request may require identity verification. Some information may be retained where an exception applies, including tax, transaction, fraud-prevention, security, and legal-claims records.
9. International data transfers
Forma and its providers may process information in countries other than the one where you live. Where required, Forma relies on recognized transfer mechanisms and contractual or organizational safeguards intended to protect personal information.
10. Policy changes
Forma may update this Policy to reflect changes to the Service, providers, or applicable law. The effective date at the top identifies the current version. Material changes will be communicated through the Service or another reasonable channel when required.
Questions or privacy-rights requests may be sent through the support contact published by Forma. Please do not include passwords, payment-card details, or sensitive personal information in a request.