— LEGAL
Privacy policy
Drawdiags is built so that your diagrams never reach us. This page lists the little data that does move, who handles it, and what you can do about it.
The short version
- No account, no cookies, no analytics, no ads, no tracking.
- Your diagrams, code and settings stay in your own browser, in files you choose, in VS Code on your device, or in your Confluence pages. They are never sent to us.
- Everything the website loads comes from drawdiags.com itself. No other company’s server is contacted.
- Our host, Cloudflare, handles the technical data every web request carries, such as your IP address, to deliver the site and keep it safe. We keep no logs of our own.
- If you email us, we use your message only to answer it.
Who we are
Drawdiags (“we”, “us”) runs drawdiags.com: the hub site, the five editors (Drawtabase, Drawpenapi, Drawmaid, Drawlize and Drawuml), the Drawdiags apps for Confluence Cloud and the Drawdiags extensions for Visual Studio Code. This policy covers all of them. Together we call them “the service”.
We are responsible for the processing described here. For anything about this policy or your data, write to contact@drawdiags.com.
What we don’t collect
You don’t need an account, and we never ask for your name or email address to use the service.
- The service sets no cookies.
- It has no analytics, advertising, tracking pixels, fingerprinting or third-party error reporting.
- On drawdiags.com, every file the pages load (code, styles, fonts, images) comes from drawdiags.com itself. Your browser doesn’t contact any other company’s servers while you use the website.
- The editors work entirely in your browser. Your diagrams, code and settings are never sent to us or to anyone else.
What stays in your browser
To keep your work between visits, the editors save it in your browser’s own storage, on your device:
| STORAGE | WHAT IT HOLDS | KEPT UNTIL |
|---|---|---|
| Local storage |
Your documents (diagram and code), the list of your documents, and your settings:
theme, version-history interval, save targets and view options. Keys start with the
editor’s name, such as drawmaid:. The hub pages store only your theme
choice (drawdiags:theme).
|
You delete the document or clear this site’s data |
| IndexedDB |
The version history of your documents (for example drawmaid-data) and,
if you save to a file on your disk, your browser’s reference to that file (for
example drawmaid-disk), so the editor can keep saving to it.
|
You delete the document or clear this site’s data |
| Session storage | Short-lived markers that let an editor recover safely if a tab crashes while it reads history or a saved file. | The tab is closed |
This data doesn’t leave your device through the service. We can’t see it, back it up or restore it, and anyone who uses the same browser profile can open it. Delete it whenever you like: remove documents in the editor, or clear the site data for drawdiags.com in your browser’s settings.
This storage exists only to provide the features you use, which is why there is no cookie banner.
Files, exports and the clipboard
When you open a file, save to a file on your disk, or export the code or a picture of the diagram, your browser asks you to pick the file or shows a normal download. The editor reads and writes only the files you pick, and all the work happens on your device. Nothing is uploaded.
The copy buttons put code or a link on your clipboard, and only when you click them.
Hosting and delivery
The website is hosted by Cloudflare, Inc. Like every web server, Cloudflare receives the technical data your browser sends with each request: your IP address, the address requested, the date and time, your browser’s user agent and the site you came from. Cloudflare uses it on our behalf to deliver the pages and to protect the service from attacks and abuse.
We haven’t switched on request logging, so we don’t keep these records ourselves. Cloudflare’s dashboard shows us aggregate figures only, such as the number of requests and the countries they come from.
If Cloudflare needs to check that a visitor is a person, for example with a security
challenge, it may set a strictly necessary security cookie such as __cf_bm
or cf_clearance. These cookies are used only for security.
Cloudflare operates worldwide, so this data may be processed outside your country, including in the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework and offers the European Commission’s standard contractual clauses. See Cloudflare’s privacy policy.
The Confluence apps
Each editor is also available as an app for Confluence Cloud, built on Atlassian Forge. When you use one:
- the diagram is stored in the Confluence page itself, as part of the macro’s settings. It is copied, versioned and deleted along with the page;
- the app runs inside Confluence, on Atlassian’s infrastructure. It has no server of its own and makes no connection outside Atlassian, so your diagrams, pages and user details are never sent to us;
- the app doesn’t keep your documents in your browser’s storage.
Atlassian processes Confluence data under its own terms and privacy policy, and your organization’s Confluence administrators control it. Atlassian gives app developers limited information about installations, such as the address of the Confluence sites where an app is installed and aggregate usage figures. We use it only to operate and support the apps.
The VS Code extensions
Each editor is also available as an extension for Visual Studio Code. When you use one:
- the diagram is the file you open with it. The extension reads and writes that file, and VS Code saves it like any other file. A picture you export is saved where you choose;
- the extension runs inside VS Code. It makes no network requests and has no telemetry, and its editor is blocked from contacting any server, so your files are never sent to us or to anyone else;
- in the editors where you arrange the diagram yourself (Drawtabase, Drawlize, Drawuml and Drawmaid), the extension remembers where you placed things. It keeps that, with a copy of the file’s content, in VS Code’s own storage for the extension, for the 200 files you arranged most recently. This stays where VS Code keeps its data. It is not added to your project and not sent anywhere;
- the extension doesn’t use your browser’s storage and sets no cookies.
You install the extensions from the Visual Studio Marketplace, run by Microsoft, or from Open VSX, run by the Eclipse Foundation. Each handles the download under its own privacy policy and shows us aggregate figures only, such as the number of installs. Visual Studio Code is Microsoft’s product and has its own telemetry settings. The extensions add nothing to them.
When you email us
If you write to contact@drawdiags.com, we receive your email address, your name if your email program includes it, and whatever your message contains, attachments and share links included. We use it only to answer you and to deal with what you report.
Mail to that address is forwarded by Cloudflare Email Routing to a mailbox hosted by Google (Gmail), which processes it as our email provider (Google’s privacy policy). We keep a conversation only as long as we need it to handle your request and any follow-up, and then delete it.
Legal bases
If you are in the EU, the EEA or the UK, we rely on these legal bases under the GDPR:
- Delivering and securing the website (hosting): our legitimate interest in running a website that works and is safe, Art. 6(1)(f).
- Answering your messages (email): our legitimate interest in replying to people who contact us, Art. 6(1)(f), or steps you ask us to take, Art. 6(1)(b).
- Browser storage (your browser): information is stored on your device only to provide the features you use. No personal data reaches us through it.
Your rights
Depending on where you live (for example in the EU, the EEA, the UK or California), you have the right to ask what personal data we hold about you, to have it corrected, deleted, restricted or handed to you in a portable format, and to object to its use. You can also complain to a data protection authority, in particular in the country where you live or work.
In practice we hold personal data about you only if you have emailed us, so most requests are quick: write to contact@drawdiags.com. We can’t reach data stored in your browser or in your Confluence site. It is under your control, or your Confluence administrators’.
We do not sell personal data, and we don’t share it for advertising.
Links to other websites
The service links to other websites, such as the Mermaid and PlantUML documentation. Once you follow a link, that website’s own privacy policy applies.
Children
The service is a general-purpose tool for developers and is not aimed at children under 16. We don’t knowingly collect personal data from children.
Changes to this policy
When the service changes what happens to data, we update this page before the change goes live and change the date at the top. If a change means more data reaches us, we will say so clearly at the top of this page.
Contact
Questions about this policy or your data: contact@drawdiags.com, or see the contact page.