Privacy Policy and Data Processing Notice

Last updated: October 7, 2026

TemplateBox (templatebox.win) is a fully client-side web application. This notice explains exactly where your information lives, what stays on your device, which third-party services are involved in delivering the site, and what you can do about any of it. Questions can be sent to [email protected].

1. Your Documents Never Leave Your Device

Every form field you type, every photo you upload, and every file you export is processed entirely inside your own web browser using local JavaScript. TemplateBox operates with zero backend servers and zero databases.

• Resume text is compiled into a PDF locally on your device.
• Receipt, invoice and employee notice details, including names, addresses, payment amounts and disciplinary records, are compiled into a PDF locally on your device and are never transmitted anywhere.
• Poster photos are drawn onto a local canvas element and exported as a PNG file directly to your downloads folder.
• No document content, image, or personal detail is ever transmitted to us, because there is no server to receive it.
• The editors, and the panel on the home page that shows your saved work, are hidden from the analytics service described in section 4. Their content is never uploaded to it.

2. State Preservation via Browser localStorage

To let you close a tab and resume later, editor inputs are saved in real time to your browser's built-in localStorage memory. This data is stored only on your device, is never synchronized to any external system, and can be erased at any time with the "Start fresh" control on the home page or by clearing your browser's site data for templatebox.win.

3. No Accounts, No Sign-Ups, No Cookies of Our Own

TemplateBox does not offer or require user accounts, does not collect email addresses, and does not set any cookies of its own. The analytics service in section 4 sets two cookies on this domain (_clck and _clsk) to recognise a returning browser, and the advertising network may use its own cookies or identifiers.

4. Third-Party Services

While your document data stays local, standard connection data (such as IP address, browser type, device type and the pages visited) is processed by the third-party services that deliver and fund this free platform:

• Advertising (Adsterra): Ad units are served by the Adsterra network, which may use its own cookies or identifiers to deliver and measure advertising, under its own privacy policy. Advertising appears on the loading screen shown before an editor opens, on the guide and article pages, on the template information pages, alongside each editor, alongside the template catalogue on the home page, and in a bar fixed to the bottom of the screen on phones and tablets. It is always a passive banner. It never opens pop-ups or new windows.
• Advertising and your document content: Every ad unit on this site is rendered inside an isolated frame served from the advertising network's own domain. Browsers prevent code inside such a frame from reading the page that contains it, so an advertisement placed beside an editor cannot access the document you are working on, the values in any form field, or anything held in your browser's storage for this site. Formats that would run advertising code directly inside the editor page are deliberately not used.
• Infrastructure (Cloudflare and Netlify): Static site files are delivered through Cloudflare DNS routing and Netlify hosting, which log standard network requests for security and performance. The PDF library the editors use is loaded from Cloudflare's cdnjs network. See the Cloudflare and Netlify privacy policies.
• Fonts (Google Fonts): The typefaces on this site are loaded from Google's font service, so your browser sends Google its IP address and browser details when a page loads. See Google's privacy policy.
• Analytics (Microsoft Clarity): Clarity records how pages are used, such as clicks, scrolling, mouse movement and page layout, to help us find and fix usability problems. Its cookies recognise a returning browser, so this data is pseudonymous rather than anonymous. Form fields are masked on every page, and the editors and the saved-work panel on the home page are masked entirely, so what you type is never uploaded to Clarity. See the Microsoft privacy statement.
• Voluntary support (Ko-fi): The "Support us on Ko-fi" link in the menu opens our page on ko-fi.com in a new tab. Nothing is sent to Ko-fi unless you follow that link. If you choose to support TemplateBox there, the payment and any name or message you give are handled by Ko-fi and its payment providers, not by this site, under Ko-fi's privacy policy. Supporting is entirely optional and changes nothing about how the site works for you.
• Printing (Printful affiliate links): The Download panels of the poster and mockup editors, and the Printing section of the business card editor, include a link to Printful, a print-on-demand service, for anyone who wants their design printed. It is an affiliate link: if you order through it, TemplateBox may earn a commission at no extra cost to you. Nothing is sent to Printful unless you follow the link, and your design is never passed to Printful by this site; you would upload it there yourself. Printful handles any order under its own privacy policy.
• Videos in guides (YouTube): Some guides include a TemplateBox video. Until you press play, the page shows only a still image loaded from YouTube's image server, which receives your IP address and browser details like any other image request. Pressing play loads the player from youtube-nocookie.com, YouTube's privacy-enhanced mode, after which YouTube processes your viewing under Google's privacy policy. Nothing you type in the editors is ever sent to YouTube.

Each provider processes connection data under its own published privacy policy, and some may process it in countries other than yours, including the United States. We do not sell, enrich, or re-share any information with additional parties.

5. Why This Data Is Processed

• Delivering the site and keeping it secure (hosting, DNS, content delivery and fonts): our legitimate interest in running a working, secure website.
• Usability analytics (Clarity): our legitimate interest in finding and fixing problems with the tools.
• Advertising (Adsterra): our legitimate interest in funding a service that is free to use.
• Saving your work (localStorage): this happens only on your device, to provide the feature you are using.

6. How Long Data Is Kept

Your saved work stays on your device until you clear it. TemplateBox itself keeps no data about you, because it has nowhere to keep it. Connection and usage data held by the providers in section 4 is kept for the periods set out in their own policies.

7. Your Rights

Depending on where you live, for example under the GDPR in the European Union and United Kingdom or the CCPA in California, you may have the right to access, correct or delete personal data about you, to restrict or object to its processing, and to complain to your local data protection authority.

Because TemplateBox holds no personal data itself, there is nothing on our side to look up or delete. Your saved work can be deleted at any time as described in section 2. For data held by one of the providers in section 4, you can contact that provider through its privacy policy, or email us and we will help you reach the right one. You can also block or delete cookies in your browser settings; the tools keep working without them.

8. Children

TemplateBox is a general-audience tool and is not directed at children under 16.

9. Changes to This Notice

This notice may be updated. The date at the top of this page shows the most recent revision.

10. Contact

This site is operated as TemplateBox. Questions about this notice, or requests about your data, can be sent to [email protected].