Privacy Policy
Last updated 15 November 2026. Controller: Digital Shijil LLC, a Wyoming limited liability company, trading as Tidy Button, 34 N Franklin Ave Suite 687-#5144, Pinedale, WY 82941, USA. Contact: contact@tidybutton.com
Scope
This policy covers the Canva apps SheetMerge Pro, Print Preflight, Book Cover Builder, Planner & Calendar, Sticker Cut Lines, Monogram Maker, LUT Colour Grade, Stitch Patterns and this support site (canva.tidybutton.com). The apps run inside Canva, so Canva's own privacy policy also applies to your use of Canva.
What stays in your browser
Your designs, images, spreadsheet files, pasted text and the results the apps create are processed in your browser. Our servers do not receive them. The one exception is a Google Sheet link in SheetMerge Pro: the link is sent to our server so it can fetch the published sheet for your browser; the sheet content is passed straight back with caching turned off and is not stored.
The apps also keep small items in your browser's own storage on your device: for example the progress marker that lets SheetMerge Pro or Planner & Calendar Pages resume a run, and the .cube files you add in LUT Colour Grade (kept on your device only). You can clear these through your browser settings.
What our server stores
To count usage and check your plan, the apps call our server, which runs on Cloudflare Workers with a Cloudflare D1 database. Canva gives the app a signed token for the signed-in user, which we verify. We store:
- Account identifiers: your Canva user id and Canva brand (team) id, and the date they were first seen. We do not receive your name, email address or profile.
- Usage counts: per user, per app and per calendar month, the number of units used (rows, checks, covers, pages, stickers, monograms, grades or charts) and the last amount reserved.
- Licence records: the licence key you activate, the activation id and product id from Polar, the status (granted or inactive), the expiry date if any, and the times we last checked it.
- Run progress (SheetMerge Pro only): a random job id, the total number of rows, how many are done and the status. Not the rows themselves.
We do not store design content, images, file names, spreadsheet contents or email addresses on our server. We do not use advertising or analytics cookies, and this support site sets no cookies.
Logs and error reports
Our server writes technical logs (for example an event name, an HTTP status and a request path) to Cloudflare Workers Logs so we can find faults. Licence keys are never logged in full. Cloudflare processes network information such as IP addresses to deliver requests; our application does not store it.
Payments
Pro is sold by Polar (polar.sh) as merchant of record. Polar collects your payment details, email address and billing information and issues receipts and licence keys. We never see your card number. When you activate a key, our server sends the key to Polar to validate it and sends your Canva user id as the label of the activation, and it checks the key with Polar about once a day afterwards.
Why we use this data
To run the apps, enforce monthly plan limits, unlock Pro for licence holders, prevent a key being shared beyond its limit, keep the service reliable and answer support requests. We do not sell personal data or use it for advertising.
Retention and deletion
Usage counts and licence records are kept while the app is in service so your plan and limits keep working if you come back. Run progress records are small and kept the same way. To have the records tied to your Canva user id deleted, email contact@tidybutton.com from the address on your Polar receipt, with the app name and, if you can, the last four characters of your licence key. We will delete them within 30 days. Deleting a licence record does not cancel a subscription; cancel through Polar. Payment and receipt records are held by Polar under its own policy.
Processors and sharing
- Canva: the platform that runs the apps and provides the signed user token.
- Cloudflare: hosting of our Worker, database and this site.
- Polar: payments, tax and licence keys.
- Google: only when you give SheetMerge Pro a published Google Sheet link, to fetch that sheet.
We share data with these providers only as described above, and when the law requires it.
Your rights
You can ask for access to, correction of or deletion of the records we hold about you, and you can object to or restrict their use, by emailing contact@tidybutton.com. If you are in the European Economic Area, the United Kingdom or California you may have additional rights under local law, and you may complain to your local data protection authority. Data is processed in the United States and in other countries where our providers operate.
Children
The apps are not directed to children under 13 and we do not knowingly collect their data.
Changes
We will post changes on this page and update the date above.