Privacy Policy

PackMyMan ("we", "our", "the service") is a packaging template generator that allows users to create dielines in SVG, PDF, and DXF formats. Registered users can also save favourites and view their download history. This Privacy Policy explains what information we collect, why we collect it, how we use it, and how you can control it.

We collect information in two ways: information you provide directly, and information generated by your use of the service.

We use the information we collect to:

• Create and manage your account
• Power your favourites list and download history
• Authenticate you securely using Web Tokens
• Understand which templates are most popular to prioritise new additions
• Improve performance, fix bugs, and develop new features
• Contact you about material changes to our Terms or Privacy Policy

PackMyMan does not use advertising cookies. We do use the following for core functionality:

• Authentication Token (pm_token) — a signed JSON Web Token issued upon login and stored in your browser's localStorage. Used exclusively to verify your identity on subsequent requests. It expires automatically and is used solely for authentication purposes.
• Region Cookie (pm_region) — a server-assigned cookie set on your first visit to determine whether you are located within the European Economic Area. Contains no personal data. Expires after 24 hours. Used solely to apply the appropriate analytics data-minimisation standard required under applicable privacy law.
• User Preference Storage — localStorage entries storing UI preferences such as your preferred measurement unit and recent dimension inputs. Strictly functional and never transmitted to our servers.
• Analytics Storage (EU/EEA and United Kingdom users) — PostHog operates in memory-only mode. No cookie or localStorage entry is written to your device. Session identifiers are held solely in browser memory and are permanently discarded when you close the tab. No consent is required as no data is stored on your device.
• Analytics Storage (non-EU users) — PostHog stores a pseudonymous persistent identifier via cookie and localStorage to enable cross-session product analytics. This identifier is not used for advertising, profiling, or any purpose other than understanding product usage. You may clear it at any time by clearing your browser storage.

You can clear your browser storage at any time, which will log you out of the service.

We may use the following third-party tools:

• PostHog — product analytics platform used to understand feature usage, download behaviour, user journeys, and session recordings. EU/EEA users are tracked in memory-only mode with no persistent storage on their device. Users outside the EU/EEA and United Kingdom are tracked via a pseudonymous persistent identifier. All data is processed and stored exclusively on EU servers. See posthog.com/privacy.
• Umami Analytics — privacy-friendly, cookie-less analytics to measure basic traffic and page views.
• Vercel — hosts the PackMyMan website and API.

These providers may collect anonymous technical data necessary for their operations.

We do not sell, rent, trade, or share your personal data with any third parties for marketing or commercial purposes.

Anonymous, aggregated usage data (e.g. "tuck-end boxes were downloaded 500 times this month") may be visible internally or used in public-facing statistics. It contains no personally identifiable information.

We take reasonable steps to protect your data:

• Passwords are hashed before storage — your plain-text password is never saved.
• Authentication is handled via signed tokens with expiry — tokens cannot be forged.
• Generated dielines are created on demand and discarded after delivery — we do not store your design files.
• We use industry-standard hosting (Vercel) with HTTPS enforced on all traffic.

No system is 100% secure. We encourage you to use a strong, unique password and to log out on shared devices.

You have the following rights regarding your personal data:

• Access — you can view your account information and download history while logged in.
• Correction — you can update your account details at any time in your account settings.
• Deletion — you can request full deletion of your account and all associated data by emailing support@packmyman.com.
• Portability — you can request a copy of the data we hold about you.

We will respond to data requests within 30 days.

We retain your account data for as long as your account is active. If you delete your account, your personal information, favourites, and download history are permanently removed within 30 days. Anonymised, aggregated analytics data (with no link to your identity) may be retained indefinitely for service improvement purposes.

PackMyMan is not directed toward children under 13. We do not knowingly collect personal information from minors. If you believe a child has registered without parental consent, please contact us and we will delete the account promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised whenever changes are made. For material changes, we will notify registered users by email where possible.

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at support@packmyman.com.