Privacy Policy
Last updated: August 2026
This Privacy Policy explains what account and technical information visdraw processes, how browser storage is used, and how images opened in the editor are handled.
Information and Data We Handle
- Images and edits: Images you open and the edits you make are processed in your browser. The editor does not upload them to visdraw servers for image processing.
- Account and authentication information: If you choose to sign in, we process your email address, display name, profile image (if available), sign-in provider identifier, OAuth token data used to maintain the Google account connection, and account timestamps. Email passwords are stored only as one-way hashes; we do not store readable plaintext passwords.
- Session and security information: To keep you signed in and prevent abuse, we process session tokens, expiration times, IP addresses, and browser user agents. Email codes are stored briefly in hashed form and expire after 5 minutes.
- Local preferences: Cookie choices, editor layout preferences, usage hints, and saved presets may be stored in your browser’s local storage.
- Support messages: If you contact us by email, we receive the information you choose to include in your message.
How We Use Your Information
- To create and maintain your optional visdraw account and sign-in session
- To complete email-password or Google sign-in and send email verification or password reset codes
- To save preferences and editor presets on your device
- To respond to support requests
- To protect and operate the service and comply with legal or security obligations
Data Storage and Security
Images and edit state stay in browser memory during the editing session; saved presets and preferences remain in local browser storage until you remove them. Account, sign-in provider, and session records are stored in Cloudflare D1. Account records are retained while the account remains active; sessions are managed according to their expiration, and signing out revokes the current session. We use reasonable safeguards for systems we control, but no method of storage or transmission is completely secure.
Third-Party Services
- Google OAuth: Used only when you choose “Continue with Google” to verify your identity and provide basic profile information. Google’s own privacy policy applies to its processing.
- Cloudflare: Runs the service through Workers, stores authentication data in D1, and sends the email verification and password security messages you request through Email Service.
- visdraw does not currently integrate third-party analytics, advertising, or payment services. The editor continues to use standard browser capabilities to process images locally.
Your Choices and Rights
- Keep using the editor as a guest without signing in
- Sign out at any time or remove authentication cookies through your browser
- Clear site cookies or local storage through your browser
- Reset locally saved preferences and presets by clearing this site’s browser data
- Contact us to request access to, correction of, or deletion of your account information, or to make another privacy request
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Questions?
If you have any questions about this Privacy Policy, please contact us.
support@visdraw.com