Privacy Policy

Last updated: July 30, 2026 · Applies to Penmark

Penmark ("the site", "we") turns typed text into your own handwriting. We collect as little as possible; this page explains transparently what we collect, why, who it is shared with, and your rights. The database owner and privacy contact is Alon Malka, alonmalka021@gmail.com.

1. What we collect, why, and whether it's required

Providing your data is not a legal obligation — it depends on your consent. Next to each item we note what happens if you don't provide it.

Handwriting samples you upload (template scans or photos) — processed on our server to build your handwriting library and render documents. Without them a personal font can't be created. Kept temporarily only and deleted automatically within about 24 hours (and on every server update). We never share them or use them to train models.
Text you type or upload (including names and details on invitations) — processed to render your document, stored temporarily with the session and deleted within ~24 hours. Without it there's nothing to render. This content is never sent to analytics.
Waitlist email address — only if you choose to leave it, to tell you when new features are ready. Without it we simply won't send you updates. Kept until you ask to be removed. See section 4 for where it is stored.
Usage data (analytics) — a random visitor ID (cookie), generic event names (e.g. "document rendered"), and your IP address and country, collected by the analytics service PostHog. We also record how the page is used, as explained in section 2. The content of your documents is never part of usage data.

2. Recording of how the site is used

To understand where people get stuck, the analytics service PostHog records how the page is used: mouse movement, clicks, scrolling and moving between pages. A recording is a reconstruction of what happened in the interface, not a video of your screen, and it has no access to your camera or microphone. The same data also builds click and scroll heatmaps.

Text you type is not captured. Every input field on the site, including the document text box, is masked in the recording: asterisks are stored instead of what you typed.
The content of the documents you create is not captured. The page area showing the document, the handwriting-sample preview, the download links and the image addresses of all of them are excluded from the recording: an empty box of the same size is stored in place of the content areas, and the addresses themselves are not stored in the recording at all.
The names of files you upload are not captured. The upload area is excluded from the recording, so the name of the file you picked is not kept in it.
Browser console logs are not collected.
Recordings are stored by PostHog (see section 4) and deleted automatically after 30 days.
To object to being recorded: email alonmalka021@gmail.com and we will delete recordings related to you. An analytics-blocking browser extension prevents the recording in the first place.

3. Cookies

lang — remembers your interface language (1 year).
vid — a random visitor ID for usage statistics (1 year). It does not identify you personally.
PostHog cookies — to recognise repeat visits for analytics.

4. Who your data is shared with (third parties & transfers abroad)

The site is hosted on, and uses, cloud services whose servers are located outside Israel (in the US and/or the EU) — meaning your data is stored and processed abroad:

Hosting — Hugging Face: temporary data (samples, documents) is stored on their infrastructure.
Analytics — PostHog: receives event names, the visitor ID, your IP address and country, the recordings of how the site is used (section 2), and your waitlist email address (if provided). Document content is not sent.
Fonts — Google Fonts: loading fonts exposes your IP address to Google, as with any resource load.

Transfers abroad rely on your consent to this policy and on data-processing agreements (DPAs) with these providers. We do not sell data, show ads, or use your data to train models.

5. Retention

Handwriting samples and generated documents — up to ~24 hours, then deleted automatically.
Waitlist email — until you ask to be removed.
Recordings of how the site is used (section 2) are kept for 30 days, then deleted automatically by PostHog.
Other analytics data — per PostHog's retention policy.

6. Your rights

Under Israel's Privacy Protection Law you have the right to access data related to you (section 13), to correct inaccurate data (section 14), and to deletion. You may also withdraw consent at any time, including objecting to the recording of how you use the site (section 2). To exercise any of these (for example, removing your waitlist email), email alonmalka021@gmail.com. Scans and documents are deleted automatically within ~24 hours anyway.

7. Security

Traffic is encrypted (HTTPS), files live in isolated session folders with random IDs and are auto-deleted. Still, no online storage is perfectly secure — please don't upload especially sensitive documents.

8. Minors

The site is not intended for the deliberate collection of children's data. A child's handwriting: a parent or guardian should be the one uploading it, not the child. In that case what we collect is only the handwriting samples and the text sent for rendering, and both are deleted from our server automatically within about 24 hours (section 5). No name, age or other identifying detail about the child is needed to use the service. If you enter a minor's details (e.g. a child's name on an invitation), you are responsible for having the authority to do so.

9. Changes

If this policy changes (for example when new features launch), we'll update the date at the top.