Privacy Policy

1. What stays on your device

Dieline geometry, the 2D editor, the 3D folding preview, photo and video mockups, and the PDF preflight checker all run in your web browser. Mockup images and videos you render, and PDFs you check with the preflight tool, are created or read on your device and are not uploaded to us, unless you choose to send a video to TikTok (see section 4).

While you work, the studio keeps your current design (box dimensions, design layers and settings) in your browser’s local storage so it survives a page reload. You can remove it at any time by clearing your browser’s site data.

2. What we store when you sign in

• Account details: your email address, the sign-in method you used (email or Google), your name if your sign-in provider shares it, your plan, export credits and purchase history.
• Saved designs: names, folders, notes, box dimensions and design layers (text, shapes, emoji and the position of placed images).
• Artwork and placed images: print artwork and images you add in the studio are uploaded to a private Google Cloud Storage bucket so you can reopen them with your designs. Files are only reachable through short-lived signed links issued to your account. When you remove an image and no saved design uses it, we delete the file.
• Share links: when you create a share link while signed in, we store a snapshot of the design (dimensions, design layers, and copies of its artwork and images) so the link keeps working even if you later change or delete the original. Anyone who has the link can view the snapshot. Ask us if you want a snapshot removed.

If you use DielineKit without an account, your designs and artwork are not stored on our servers: your work stays in your browser, and share links contain only the box settings and text, shapes and emoji encoded in the link itself. Analytics events can still include settings such as box style and size (see section 7).

3. AI features

When you use “Design it for me”, we send your brief (for example brand name, product and style notes) together with the box style, dimensions and panel layout to Google Cloud’s Vertex AI, which generates a suggested layout and, if you choose, a logo mark, an illustration and background artwork made by Google’s image model. We do not send your artwork or images, or the contents of any barcode or QR code you add; we draw those codes ourselves. Generated images are stored with your designs like images you upload. Google Cloud processes these requests as our service provider under its Vertex AI terms. We record when you use the feature so we can apply credits, free retries and usage limits. Please don’t include confidential information in a brief that you would not want processed by an AI service.

4. Sharing videos to TikTok

If you choose Share to TikTok on a mockup video, you sign in with TikTok and decide which permissions to give DielineKit:

• Basic profile (user.info.basic): your TikTok display name and profile photo, used only to show which account you are posting to. We do not store them.
• Posting (video.publish) and inbox uploads (video.upload): used only when you press Post or Send, to send that one video with the title and settings you chose, and then to check whether TikTok has finished processing it.

TikTok’s access tokens and your TikTok account ID are kept in an encrypted cookie in your browser, not in our database. Choosing Disconnect in the share dialog revokes DielineKit’s access and removes the cookie; you can also remove DielineKit from the app permissions in your TikTok settings.

To reach TikTok, the video is uploaded to our private Google Cloud Storage bucket, sent from there to TikTok, and deleted as soon as the transfer finishes. Copies left behind by an interrupted transfer are deleted automatically. Once it is on TikTok, the video is handled under TikTok’s own Terms of Service and Privacy Policy.

5. Payments

Purchases and subscriptions are processed by Lemon Squeezy (our merchant of record) or PayPal. They handle your card or PayPal details; we never receive or store card numbers. We receive the order details we need to deliver your purchase, such as your email address, the product, the amount and the order reference. Export downloads are authorised with short-lived (15-minute) signed tokens.

6. Emails and contact

We send account, purchase and product emails through Resend, including occasional tips and reminders about unused credits or saved designs; every product email has an unsubscribe link. Messages you send through our contact or feature-request forms are delivered to us by email through Resend, or through FormSubmit if Resend is unavailable, and we use your email address to reply.

7. Analytics, cookies and local storage

We use PostHog to understand how DielineKit is used and to fix problems: pages viewed, clicks, feature usage (such as exports and mockup renders, including settings like box style and dimensions) and error reports. When you are signed in, these events are linked to your account, including your email address and plan. With your consent, PostHog keeps an identifier in a cookie and local storage, so visits from the same browser are linked, and can record session replays of how pages are used. Without consent it keeps that identifier only in memory: events are still sent, but they are not linked across visits and no replays are recorded.

We use cookies and local storage for your sign-in session, for studio preferences and unsaved work, for your cookie choice, for analytics identifiers (with consent), and, if you connect TikTok, for your encrypted TikTok connection.

We also use the Google tag from Google Ads on our website to measure how well our ads work and to show DielineKit ads to people who have visited it. With your consent it sets advertising cookies and sends Google the pages you visit, and when you create an account, that a sign-up happened (with your account’s random ID, so it is only counted once), along with technical details such as your browser, device and IP address. Google may combine this with other data it holds under its own privacy policy.

Visitors who are not on the Pro plan may see ads on our website served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on those visits. You can opt out of personalised advertising in Google’s Ads Settings, or opt out of some third-party vendors’ personalised ads at aboutads.info. In the European Economic Area, the UK and Switzerland, ads are only personalised if you agree; otherwise Google shows ads that are not based on your browsing.

If you are in the European Economic Area, the UK or Switzerland, we ask first, and no analytics or Google Ads cookies are set unless you accept. Elsewhere they are on unless you turn them off. Without consent the Google tag still sends Google cookieless signals, such as that a page was viewed, with ad click identifiers removed, which Google uses to measure ads in aggregate. You can change your choice at any time with Cookie settings (also at the bottom of every page). Turning the cookies off removes the analytics and Google Ads cookies stored on our domain. You can also turn off personalised ads in your Google account’s ad settings or block these cookies in your browser.

Our free widgets can be placed on other websites (see our widgets page). A widget sets no cookies and stores nothing in your browser. We record anonymous usage events from it, such as that it was loaded or which box style was chosen, together with the name of the website it is on, and error reports. Barcode numbers, links and other text you type into a widget stay in your browser unless you choose to open the full tool on DielineKit.

8. Service providers

These companies process data on our behalf, only for the purposes listed:

9. Security

Data is transmitted over HTTPS. Database access is restricted per account with row-level security, the artwork bucket is private, and files are only served through signed links that expire within 30 minutes. No system is perfectly secure, but we limit what we store to what the service needs.

10. Retention and deletion

• Account data, saved designs and their files are kept while your account is active.
• Artwork and images are deleted when you remove them and no saved design still uses them.
• Share-link snapshots are kept so the links keep working, until you ask us to remove them.
• Your TikTok connection lasts until you disconnect it or TikTok’s authorisation expires (up to a year). Videos sent to TikTok are deleted from our storage once the transfer finishes.
• You can ask us to delete your account and all associated data at any time; purchase records may be kept where the law requires it.

11. Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to analytics. Depending on where you live, you may have additional rights under laws such as the GDPR. Contact us and we will respond within 30 days.

12. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we handle your data, we will tell signed-in users by email or in the app.

13. Contact

For privacy questions or data requests, email privacy@dielinekit.com or support@dielinekit.com, or use our contact page.