Privacy Policy
Ideadraw (“we”, “us”) is an editor for notes, mind maps, diagrams and ERDs at ideadraw.app. It is operated by BRP (BlueRedPolarity), a sole proprietorship registered in the Republic of Korea (business registration no. 511-32-01572). This policy explains what we collect, why, and the choices you have.
1. Using Ideadraw without an account
You can use the editor without signing in. Your documents and settings then stay in your browser's own storage (IndexedDB and local storage) on your device. We do not receive them. Clearing your browser data deletes them.
2. What we collect when you sign in
| Data | Why | How long |
|---|---|---|
| Email address | To identify your account and send sign-in codes | Until you delete your account |
| Name and Google account ID (only if you sign in with Google) | To link your Google sign-in to your account | Until you delete your account |
| Documents you save to the cloud, with their file names, sizes and save times | To store your documents and show them on any device | Until you delete them or your account |
| Sign-in session (a random token in a cookie; we store only a hash of it) | To keep you signed in | 30 days, or until you sign out |
| Sign-in codes (stored only as a hash) | To check the code you type | 10 minutes, then unusable |
| IP address of sign-in code requests | To stop abuse of our email sending | Deleted after 1 day |
We do not sell your data. We do not show ads and do not use analytics or advertising cookies at this time. If that changes, we will update this policy before it happens.
We do not look at the content of your documents, except when you ask us for help with them, when needed to keep the service secure and running, or when the law requires it.
3. Cookies and browser storage
We set one cookie, __Host-ideadraw_s, only after you sign in. It is required for sign-in and is not used for tracking.
The editor keeps your settings (theme, language, recent files) and, when you are signed out, your documents in your browser's storage.
4. Service providers
| Provider | What they do for us | Data involved |
|---|---|---|
| Cloudflare, Inc. (United States) | Hosting, database (D1), file storage (R2), sending sign-in emails, bot protection (Turnstile) and security | All data in section 2, plus technical request data |
Cloudflare runs a global network, so your data may be processed in countries other than yours, including the United States. Cloudflare keeps operational logs of requests to our service (which can include IP address, URL and browser information) for up to 7 days, and database backups for up to 30 days.
If you choose “Continue with Google”, Google shares your name, email address and Google account ID with us under Google's Privacy Policy. We do not send your documents to Google.
The sign-in form uses Cloudflare Turnstile to tell people from bots. Turnstile processes information from your browser for that purpose, as described in Cloudflare's Turnstile privacy addendum.
5. Your choices and rights
- Download any document from the editor at any time.
- Delete a document, or delete your whole account from the account menu in the editor. Account deletion removes your documents and account records right away; database backups kept by our provider expire within 30 days.
- Depending on where you live (for example under the GDPR in the EU/UK, the CCPA in California, or the Personal Information Protection Act in Korea), you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to complain to your data protection authority. Email us to use these rights.
Legal bases (GDPR): performing our contract with you (account, storage, sign-in), and our legitimate interest in keeping the service secure (abuse prevention, logs).
6. Security
All traffic uses HTTPS. Session tokens and sign-in codes are stored only as hashes. Access to the service infrastructure is limited to the operator. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires it.
7. Children
Ideadraw is not directed to children under 13, or under the age of digital consent in your country. Do not create an account if you are below that age.
8. Changes
We will post changes here and update the date above. For significant changes we will also notify signed-in users.
9. Contact
Privacy questions and requests: support@ideadraw.app