Privacy Policy

Last updated: October 22, 2026

This policy explains what information Fleuron collects, why, and what we do with it. In short: Fleuron keeps your books on your own computer, has no AI features, no tracking and no analytics, and we collect as little as we can.

Fleuron is run by Marcus Lew, Sweden ("we", "us"), who is responsible for your information. Contact: [email protected]

Your books

Your books, and everything in them (text, pictures, fonts, your Codex, comments, versions and backups), stay on your own computer, saved where you choose. We never receive them. If you save a book in a Dropbox, Google Drive, OneDrive or iCloud folder, that service's own app uploads it under its own privacy policy; Fleuron itself uploads nothing.

In the web app (app.fleuron.pub), your books are kept in your web browser's storage on your computer. We don't receive them either.

Fleuron has no AI features. Nothing you write is sent to an AI company or used to train AI.

When you buy Fleuron

Purchases are handled by Lemon Squeezy, which acts as the seller (merchant of record). They collect your payment details under their own privacy policy (lemonsqueezy.com/privacy); we never see your card details. Lemon Squeezy tells our server your email address, your order number and whether the order is paid or refunded. We store your email address and order number, to make your account and licence and to switch the licence off after a refund.

Your Fleuron account

Your account holds:

• your email address;
• your password, stored only in a scrambled form (a hash), never the password itself;
• your licence and its order number;
• the computers that use your licence: a name such as "Mac · added 22/10/2026" that Fleuron makes, a random number that identifies the computer, and when it was last used;
• your sign-ins (stored as scrambled tokens), so Fleuron stays signed in.

To protect accounts from people guessing passwords, our server briefly keeps a count of sign-in attempts for each email address and internet (IP) address.

Your books are not stored in your account. We keep your account for as long as you have it; write to us and we'll delete it.

What the app sends online

Fleuron works offline. It goes online only for these things, and only for that purpose:

• Your licence. When you sign in, and about once a week afterwards when you're online, the desktop app asks our server (api.fleuron.pub) whether your licence is still valid, sending your sign-in token and the computer's number and name. Offline, it keeps working for 14 days after its last check. The web app asks each time you make a file, and stays signed in with a cookie that only our server can read.
• Emails from us. Welcome emails, sign-in codes and password links are sent through Resend (resend.com/legal/privacy-policy), which receives your email address and the message.
• Google Fonts. When you preview or add a font from Google Fonts, the font is downloaded from Google. Google receives your IP address and the font's name, as with any website that uses Google Fonts (policies.google.com/privacy).
• Fetch from Amazon. When you click Fetch, Fleuron opens your book's public Amazon page. Amazon receives your IP address, the book's ASIN and the store you chose. Nothing from your book is sent.
• Links and feedback. Store links and links in Help open in your web browser. Sending feedback opens your own email app; nothing is sent until you press Send there.

The app has no analytics, crash reporting or tracking of any kind.

Our websites and server

fleuron.pub, help.fleuron.pub, app.fleuron.pub and our server api.fleuron.pub are hosted by Cloudflare, which also stores the account information above (cloudflare.com/privacypolicy/). Like any web host, Cloudflare processes your IP address and basic request details to deliver the pages and protect them from attacks. Cloudflare, Resend and Lemon Squeezy may process information outside the EU; they do so under the safeguards the law requires.

The websites load fonts from Google Fonts and an animation script from Cloudflare's CDN (cdnjs), which receive your IP address when your browser fetches them.

The websites use no analytics or advertising trackers. The only cookie is the web app's sign-in cookie, which is needed to keep you signed in. The help site remembers which computer you chose (Mac, Windows or Linux) in your own browser's storage; it never leaves your browser.

When you write to us

If you email us, we receive your email address and what you write, and use them only to answer you. We keep the conversation for 24 months unless you ask us to delete it sooner.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct or delete it, or object to how we use it. Write to [email protected]. You can also complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.

We don't sell your information, and we don't share it with anyone except the services named above, as far as each needs it.

Children

Fleuron is not aimed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above, and tell you in the app or by email if the change matters.