Privacy policy

Last updated: 26 June 2026

At Diagraw we take your privacy seriously. This policy explains what data we process, why, and what rights you have. Diagraw is a collaborative diagram editor you use in your browser.

1. Data controller

Diagraw. For any question about your data, write to [email protected].

2. What data we process

• Account: your email, and your name and picture if you sign in with Google or GitHub. If you register with email and password, your password is stored hashed (Argon2id), never in plain text.
• Content: the diagrams you create and save to your account.
• Technical data: your IP address (for security and abuse prevention), a session cookie, and preferences (language, theme) stored in your browser and, when signed in, on your account.

3. Why we use it and legal basis

• To provide the service and manage your account — performance of a contract.
• To verify your email and enable password reset — performance of a contract.
• To protect the service against abuse and fraud — legitimate interest.

We do not use your data for advertising and we do not sell it.

4. Who we share it with

Only the providers needed to operate, acting as data processors:

• Google and GitHub — only if you choose to sign in with them.
• OVHcloud — sending verification and reset emails.
• Hetzner — hosting the app and database (servers in the European Union).

5. Retention

We keep your account data while your account exists. Your diagrams are kept until you delete them. Shared links expire automatically. If you delete your account, we remove your personal data except what we must keep by law.

6. Your rights

You can exercise your rights of access, rectification, erasure, portability, objection and restriction by writing to [email protected]. You may also lodge a complaint with your data protection authority (in Spain, the AEPD).

7. Minors

Diagraw is not directed to children under 14.

8. Changes

If we update this policy, we will publish the new version on this page with its date.