Privacy policy

1. Your diagrams stay in your browser

Everything you draw in infr, including diagrams, component settings and your preferences, is stored in your browser's local storage on your own device. It is not sent to a server unless you choose to save a diagram to the cloud or share it in a live session, both described below.

The analysis of your diagram runs on your device. We do not run analytics, advertising or tracking scripts.

2. Accounts

You can use infr without an account. If you sign in, we store your email address, a display name and, if you add one, a profile photo. Signing in uses a one-time link sent by email; there is no password. Your account is held in Appwrite and the email is sent through Resend, which handle that data for us.

While you are signed in, infr sets one cookie that keeps you signed in. It is marked HttpOnly, so scripts on the page cannot read it, and Secure on the live site. It is the only cookie we set, and we set it only when you sign in. Your sign-in session lasts 30 days.

You can delete your account from the account page. This removes your profile, photo and every diagram you saved in the cloud, and ends any subscription straight away.

3. Payments

Paid plans are handled by Stripe. Stripe collects and holds your card details; we never see them. We keep a copy of your subscription status, billing period and Stripe customer number so we know what you have paid for. When you delete your account the subscription is cancelled immediately and no further payment is taken. Stripe keeps its own invoice and tax records as the law requires.

4. Teams

When you create or join a team we store the team's name, who owns it, who its members are and their roles, and its subscription status. Members of a team can see each other's display names. A team owner can also see the email addresses they invited, until the invitation is accepted, revoked or expires after seven days. Invitation links are stored only as a one-way hash.

If you leave a team, or your account is deleted, your membership is removed and the team's member count is updated. Diagrams you saved to a team's shared storage stay with the team.

5. Cloud storage

Subscribers can save diagrams to the cloud. A saved diagram is stored encrypted in a private storage bucket that only our server can read. The server only hands a diagram back to the account that saved it, or to the members of the team it was saved to. If your subscription ends you can still download or delete what you saved.

6. Live sessions

A subscriber can host a live session; anyone with the code can join without an account. The diagram passes through our server, which checks every change and sends it on to everyone in the session. The host chooses whether viewers can only watch or can also change the canvas, and can switch at any time. The diagram is held in memory while the session runs and is not saved: when the session ends it is gone.

Everyone in a session connects only to our server, never to the host or to each other, so nobody in a session can see anyone else's network address. Our server sees the addresses of everyone connecting, as any website does, and uses them only to limit abuse. Everyone in a session can see everyone else's pointer on the canvas, labelled with a display name: the host's profile name, and for a viewer the name on their account, or Guest if they are not signed in. Pointer positions are passed on as they happen and are not stored.

7. Files

Open file and Save to file read and write files on your device only. A diagram you save is a normal file that you keep and share as you see fit.

8. Clearing your data

Use Reset canvas to clear the current diagram, or clear this site's data in your browser settings to remove everything infr has stored in your browser. Diagrams that are only in your browser are not backed up anywhere, so switching browser or device means they will not be there. Save to file, or to the cloud with a subscription, if you want a copy.

9. Hosting and logs

Like any website, the server that delivers infr may keep standard request logs, such as IP address and time of request, for security and reliability. These logs do not include anything from your diagrams.

10. Your rights

You can see and change your name and photo on the account page, delete your account there at any time, and download any diagram you saved. If you want to ask about data we hold, use your account to remove it, or write to us at [email protected].

11. Who we are

infr is run by Zak Noble-Clarke, a sole trader, who decides how the personal data described here is used. Contact: [email protected].

12. Changes

If this policy changes, the new version will be published on this page with its date.