Privacy Policy

Last updated 01 Jul 2026

1. What we collect

If you create an account, we collect:

Name, email address, and (optionally) phone number
A securely hashed password (if you sign up with email/password) — we never store your password in plain text
Basic profile info from Google (name, email, profile photo) if you sign in with Google
Sign-in timestamps, for account security

If you use the Service without an account, we don't collect personal information. Recent searches are stored only in your browser's local storage, never on our servers.

2. How we use it

To create and maintain your account, and keep you signed in via a session cookie
To let you save projects to your account
To send account-related emails (e.g. password reset), and to respond if you contact us
To maintain the security and integrity of the Service (e.g. rate-limiting login attempts)

We do not sell your personal information, and we do not use third-party advertising or tracking services.

3. Cookies

We use a single essential, httpOnly session cookie to keep you signed in. See our Cookie Policy for details.

4. Data sharing

We share account data with infrastructure providers strictly necessary to run the Service (database hosting, image hosting, and — if configured — an email delivery provider for transactional email). We do not share your personal information with third parties for their own marketing purposes.

5. Data retention

We retain account data for as long as your account is active. You may request deletion of your account and associated data at any time via the Contact page.

6. Your rights

You can access and update your account details from your Account page. To request a copy or deletion of your data, contact us.

7. Security

Passwords are hashed (never stored in plain text), session tokens are signed and httpOnly, and login attempts are rate-limited. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Changes to this policy

We may update this policy from time to time; material changes will be reflected here with an updated date.

9. Contact

Questions about this policy or your data? Reach us via the Contact page.

1. What we collect

If you create an account, we collect:

Name, email address, and (optionally) phone number

A securely hashed password (if you sign up with email/password) — we never store your password in plain text

Basic profile info from Google (name, email, profile photo) if you sign in with Google

Sign-in timestamps, for account security

If you use the Service without an account, we don't collect personal information. Recent searches are stored only in your browser's local storage, never on our servers.

2. How we use it

To create and maintain your account, and keep you signed in via a session cookie

To let you save projects to your account

To send account-related emails (e.g. password reset), and to respond if you contact us

To maintain the security and integrity of the Service (e.g. rate-limiting login attempts)

We do not sell your personal information, and we do not use third-party advertising or tracking services.