1. Information we collect
- Account information: the email address, name, and profile photo you provide when signing in with Google.
- Components you upload: the title, description, categories, preview image, and Figma layer data of each component you submit, from the website or the Figma plugin. These are stored under your account. Once an admin approves a component, it is public and anyone can copy it.
- Copy activity: each time a component is copied, we record which component, the time, your IP address, and your browser or app details. If you are signed in, on the website or in the Figma plugin, the copy is also linked to your account.
- Feedback: the name, email address, and message you send through the feedback form, with the page you sent it from, your IP address, and browser details.
- Non-personal information: anonymous data collected via cookies and analytics tools to understand how the site is used and to improve our services.
2. The Figmapaste Figma plugin
The plugin lets you browse and copy components inside Figma, and upload your own. When you use it:
- Browsing and copying need no account. The plugin loads components from figmapaste.com, and copies are recorded as described above.
- Signing inhappens on figmapaste.com in your browser. After you approve the request, the plugin receives an access token and saves it in Figma's plugin storage on your device. We keep only a one-way hash of that token, with the dates it was created and last used. Logging out of the plugin deletes it.
- Uploading: while the Upload tab is open, the plugin reads the name and size of the frame you select and creates a preview image of it. Nothing is sent until you submit; then the preview, the layer data you paste in, and the details you enter are sent to figmapaste.com.
- The plugin does not read or send any other part of your Figma files.
3. How we use your information
Your data is used for the following purposes:
- To provide access to all features of Figmapaste, including signing in, uploading components on the website and in the Figma plugin, and reviewing uploads before they are published.
- To show designers how often their uploads are copied, and to show our admins which components each signed-in user has copied.
- To prevent abuse, such as automated copying or spam uploads.
- To improve the website and tailor your experience.
- To communicate important updates, security notices, or replies to feedback you submit.
Non-personal data may also be shared with trusted partners to analyze usage patterns and enhance our offerings. This data remains anonymous and cannot be traced back to you.
4. Service providers
We rely on a small number of providers to run Figmapaste, and share with each only what it needs to provide its service:
- Vercel hosts the website.
- Neon hosts the database where account, upload, and activity data is stored.
- Google provides sign-in, and Google Tag Manager and Google Analytics for anonymous usage statistics.
- Figma runs the plugin and stores its sign-in token on your device.
- ntfy.sh delivers notifications to our admins about new sign-ups, uploads, and feedback. These can include your name, email address, and the title of your upload.
5. Your rights
You have the following rights regarding your data:
- Access: request a copy of your personal information.
- Correction: update any inaccurate or incomplete information.
- Deletion: request the removal of your data and your uploaded components.
- Restriction: limit how your data is processed.
- Portability: transfer your data to another service provider.
6. Security measures
We take your data security seriously and use the following measures:
- Encrypted connections (HTTPS / TLS) across the entire site.
- Modern hosting infrastructure with isolated databases and managed backups.
- Strict access controls for any sensitive information.
- Figma plugin access tokens are stored only as one-way hashes, and can be revoked at any time by logging out.
- Rate limits on copying, signing in, and uploading to block automated abuse.
7. Changes to this policy
We may update this privacy policy periodically. If significant changes are made, we will surface them in the site or via email at least two weeks in advance. By continuing to use the site after changes take effect, you agree to the revised policy.
8. Contact us
For questions or concerns about this privacy policy, please contact us at info@figmapaste.com.