Privacy Policy

Last updated: 13 July 2026

Plain-language summary, and then the details. If anything here is unclear, email us at iconito@luis.land. We'd rather explain than hide behind fine print.

The short version: we collect as little as we can. Your email so you can sign in and hear from us, your payment details handled by Stripe (we never see your card), and privacy-friendly usage analytics that run without cookies and stay in the EU. We don't sell your data or run ad trackers. You can ask us to stop analytics on you at any time, and you have the full set of GDPR rights over your data.

1. Who we are

Iconito ("we", "us") is operated by iconi.to. We're the data controller for the information described here. You can reach us any time at iconito@luis.land.

2. What we collect, and why

Only what the service actually needs to run:

• Your email address. You sign in with a magic link, so we need an inbox to send it to. We also use it to send you product email you asked for: new icons, account and billing notices. Handled through our email provider, Brevo. Legal basis: performing our contract with you, and our legitimate interest in keeping you informed.
• Payment details. If you go Pro, payment is handled by Stripe. We never see or store your card number; Stripe does, as our payment processor. We keep a record of your subscription status so we know what you're entitled to. Legal basis: performing our contract with you.
• Usage analytics. Which pages you visit, searches you run, and downloads you make, so we can see what's useful and fix what isn't. This runs through PostHog, hosted in the EU, without cookies (it uses your browser's local storage), and we only build a profile for signed-in accounts. Legal basis: our legitimate interest in understanding and improving the product. You can object at any time (see §6).
• Basic technical logs. Standard server logs (IP address, browser type, timestamps) that every website keeps, used for security, rate-limiting, and debugging. Legal basis: our legitimate interest in running a safe, working service.

3. Cookies and local storage

We keep this simple. The only cookies we set are essential ones: they keep you signed in and remember your language. Our analytics deliberately uses your browser's local storage instead of cookies, and we do no cross-site tracking and no advertising. That's why you won't see a cookie consent wall here: there's nothing non-essential to consent to.

4. Who else touches your data

We use a short list of trusted providers to run Iconito. We don't sell your data, and we don't share it with anyone for advertising.

• Stripe handles payments.
• PostHog runs our product analytics, on their EU infrastructure.
• Brevo sends our email (magic links and product notices).
• Vultr hosts the servers that run the site.

We host in the EU where we can. Where a provider processes data outside the EU, they do so under the safeguards that provider offers, such as standard contractual clauses.

5. How long we keep it

• Account data (email, subscription status) for as long as your account exists. Delete your account and we remove it, apart from records we're legally required to keep, like tax records for invoiced payments.
• Analytics according to PostHog's standard retention.
• Email for as long as you're a user or until you unsubscribe.

6. Analytics, and your choice

Because our analytics runs on legitimate interest rather than consent, you have the right to object to it. Two ways to do that:

• We respect your browser's "Do Not Track" signal automatically. If it's on, we won't capture analytics on you.
• Or just email us at iconito@luis.land and we'll exclude you from analytics.

7. Your rights

If you're in the EU/EEA, and in many other places too, you have the right to access your data, correct it, delete it, get a copy to take elsewhere, and object to processing based on legitimate interest. To exercise any of these, email iconito@luis.land. You also have the right to lodge a complaint with your local data protection authority.

8. Children

Iconito isn't directed at children under 16, and we don't knowingly collect their data.

9. Changes to this policy

If we make a material change, we'll update the date at the top and, where it matters, tell you by email. Using Iconito after a change means the updated policy applies.

10. Contact

Questions about your privacy or this policy? Email iconito@luis.land. We read everything.