Privacy Policy

Last updated: October 16, 2026

1. Data Controller

VectMint
Contact: [email protected]

This Privacy Policy explains how we collect, use, store, and protect data when you visit vectmint.com and use our free online image and SVG tools and embeddable widgets. The tools are free to use and supported by advertising. We comply with the General Data Protection Regulation (GDPR) for EU/EEA and UK users and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

2. Data We Collect

We keep our own collection to the minimum needed to run and improve the site:

  • Feedback you submit: the category, message, and optional display name you enter on our feedback page
  • Anonymous usage events: which tool was used, what action was taken (page view, export, copy), the referring site hostname, an approximate country code, and a timestamp
  • Local preferences: your theme choice, stored in your browser's local storage — it is not sent to us
  • Advertising data (third-party): when you consent to ads, our advertising provider Ezoic and its demand partners may set cookies and collect identifiers (such as IP address and device/browser information) to serve and measure ads — see section 5

Our tools process your images and files entirely in your browser — they are never uploaded to us. We do not ask for your name or email, there are no user accounts, and we do not process payments. The identifiers our advertising partners may collect are described in sections 5 and 9.

3. About Our Analytics

To understand which tools are actually useful, we record anonymous usage events. Each event contains only four things: the tool identifier (for example countdown), the action type (for example export), the referring site hostname, and an approximate country code derived from the network edge.

These events contain no identifier that could single out a visitor, are not linked to any profile, and are not combined with other data to re-identify anyone. No tracking cookies are used for our first-party analytics. Third-party advertising, which is handled separately by Ezoic and its partners, is described in section 5.

4. Legal Basis & Purpose of Processing

PurposeLegal Basis
Display submitted feedback publicly and respond to itConsent
Understand aggregate tool usage and improve the toolsLegitimate interest
Serve and measure personalized advertisingConsent
Serve non-personalized advertisingLegitimate interest
Keep the site secure and prevent abuseLegitimate interest
Comply with legal obligationsLegal obligation

5. Advertising & Third-Party Services

We use the following third-party services:

  • Cloudflare: hosts the site and its database, and provides the network edge used to derive approximate country codes
  • Ezoic (advertising): we use Ezoic to display advertisements. Ezoic and its advertising and analytics partners may place and read cookies and similar technologies, and collect identifiers such as IP address and device/browser information, to serve, personalize, and measure ads, limit ad frequency, and report performance.

In the EEA/UK and other regions that require consent, advertising and its cookies are controlled by the consent banner shown on the site (Gatekeeper). You can change or withdraw your consent at any time by re-opening the banner or using the opt-out links below.

We do not directly sell the personal information you submit. However, third-party advertising partners may use the identifiers described above for cross-context personalized advertising, which some laws such as the CCPA/CPRA may treat as a “sale” or “sharing” of personal information. You can opt out of personalized advertising through the consent banner and the links above.

6. Embedded Widgets

Our widgets can be embedded into third-party pages, including Notion. When a page containing an embedded widget is viewed, the widget is loaded from our servers and an anonymous load event is recorded, as described in section 3. The operator of that page never receives any visitor data from us. Embedded widget views are not used by us to show personalized advertising.

7. Data Retention

  • Submitted feedback: retained until it is removed from the public feedback page
  • Anonymous usage events: retained for up to 24 months
  • Advertising data: retained according to Ezoic and its partners' policies, as set out in the Ezoic privacy policy
  • Administrator session cookie: expires after 24 hours

8. Your Data Rights

Under GDPR and CCPA/CPRA, you have the right to:

  1. Access: request a copy of the personal data we hold about you
  2. Correction: request correction of inaccurate or incomplete data
  3. Deletion: request deletion of your personal data, subject to legal retention requirements
  4. Data portability: request your data in a machine-readable format
  5. Objection: object to processing based on legitimate interest
  6. Withdraw consent: change or withdraw consent for personalized advertising at any time via the consent banner
  7. Opt out of sale/sharing: under CCPA/CPRA, you can opt out of the sale or sharing of personal information (including cross-context advertising) via the opt-out links in section 5.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies & Local Storage

  • Advertising cookies: set by Ezoic and its demand partners to serve and measure ads, including personalized ads; these are controlled by your consent choice in the consent banner and the opt-out links in section 5
  • Administrator session cookie: set only for signed-in administrators, to keep the session valid
  • Local storage: stores your theme preference and your feedback vote history in your browser — neither is transmitted to us

Our first-party site sets no advertising cookies itself; third-party advertising cookies are the ones described above and are managed through the consent banner. You can also clear cookies at any time through your browser settings.

10. International Data Transfers

Data may be transferred to and processed in the United States, where our infrastructure and advertising partners operate. We ensure appropriate safeguards, including Standard Contractual Clauses (SCCs), are in place for such transfers.

11. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13, and advertising partners are configured to avoid serving personalized ads to known children.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes — for example, changes to our advertising or analytics providers — will be posted on this page with an updated effective date before they take effect.