EditFlagPrivacy Policy
Last updated 29 September 2026
This policy explains what EditFlag, run by Jehad Abughazaleh, South Africa, knows about you and what is done with it. Questions: support@editflag.com.
In short
- Your designs stay in your own browser. We never receive them.
- We store your e-mail address and your plan. We never see or store your password itself or your card details.
- Suggestions you post are public. Your e-mail address is never shown with them.
- No advertising, no tracking cookies, no selling of data.
1. What we store
| What | Why | How long |
|---|---|---|
| E-mail address | To log you in and to send codes and notices about your account | Until the account is deleted |
| Password | To log you in. It is turned into a scrambled key in your browser and stored only as a salted hash. Nobody can read it back | Until the account is deleted |
| Plan, and the customer, subscription and order numbers from Paddle | To unlock Pro on your account and to handle payment questions | As long as the law requires payment records to be kept |
| Confirmation and reset codes | To prove an e-mail address is yours. Stored as hashes | They stop working after 15 minutes |
| Log-in session | To keep you logged in | 30 days, or until you log out |
| Internet address (IP), in counters of attempts | To stop password guessing and abuse | Up to one day |
| Suggestions you post: the name you choose to show and your text | To show them in the public suggestion box. Your e-mail address is never shown with them | Until you or we remove them |
| Visit counter: a random number your browser makes for the open tab, and when it was last seen | To count how many people have the designer open. The number is forgotten when you close the tab | 2 days |
| List of e-mails sent to you: address, kind of e-mail, delivered or not | To find out why an e-mail did not arrive. Codes and texts are not kept | 90 days |
The owner of EditFlag can see the e-mail address, plan and payments of each account, and who wrote each suggestion. Nobody else can.
The e-mails about codes may name the town and country the request seemed to come from. That is worked out from the internet address at that moment and is not stored.
2. What stays on your computer
Your designs, saved designs, uploaded pictures and settings are stored in your browser only. Clearing the browser's site data deletes them.
3. Cookies
One cookie is used, named vx_session. It keeps you logged in and is needed for accounts to work. There are no advertising or analytics cookies.
4. Payments and refunds
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Paddle receives your payment details directly; we never see your card number. Paddle tells us that a payment was made, for which plan and for which account. Paddle's use of your data is described in its privacy policy.
Pro lifetime is a permanent, one-time purchase. It can be refunded within 30 days of the purchase; after that it is final and is not refunded. This is shown, and must be confirmed with a tick, before any payment is made. Details and exceptions are in the Refund Policy.
5. Who handles data for us
- Cloudflare hosts the website and the account database.
- Resend delivers our e-mails.
- Paddle handles payments as the merchant of record.
When you load a flag, an icon or a font, your browser fetches it directly from Wikimedia Commons, Iconify, jsDelivr, cdnjs or Google Fonts. Those services see your internet address, as any website you visit does.
6. Your rights
You can ask what we store about you, have it corrected, or have your account and its data deleted. Write to support@editflag.com from the e-mail address of the account and we answer within 30 days. You also have the right to complain to the data protection authority of your country.
7. Children
Accounts are for people aged 13 and over. If you believe a younger child has made an account, tell us and we will delete it.
8. Changes
If this policy changes, the date at the top changes, and important changes are announced to account holders by e-mail.