Privacy Policy

What stays on your device

Unsigned drawings live only in the active editor tab unless you export them. Signed-in cloud save uses your SVG Lab account instead of browser-persistent storage. Concretely:

• Your unsigned drawings are not saved after refresh or close. Export the file or sign in for cloud save before leaving.
• Your editor preferences (such as colour swatches and magnetic snap) are kept in memory for the current tab only.

What we collect

To understand whether the editor is useful and to catch bugs, we send a small amount of anonymous usage data to a handful of privacy-respecting services. None of it includes the drawings you make.

• Cloudflare Web Analytics — cookieless page-view metrics: which page was visited, the referring URL, your country (not city or IP), browser family, and Core Web Vitals (how fast the page loaded for you). This is used to measure traffic and performance. Cloudflare's product specifically does not use cookies and does not fingerprint individual visitors. More info.
• PostHog — product analytics that capture page views, the page you came from, your country, your browser, and the time you arrived/left. SVG Lab configures PostHog with memory-only persistence, so analytics state is not kept across browser restarts by SVG Lab. PostHog session recording is disabled. PostHog privacy policy.
• Sentry — receives a copy of any JavaScript error that the editor throws, plus the surrounding browser context (URL, browser version, the last few user actions in the app). This is how we find and fix bugs. If you submit feedback via the in-app feedback widget, that message is sent to the same Sentry inbox. Sentry privacy policy.
• Standard request data — your IP address, browser version, and the page you requested — is briefly seen by Cloudflare, our hosting provider, the same way every website on Cloudflare does. Cloudflare uses this for delivering the page and for DDoS protection.
• QuiverAI — if you use the Pro-only AI Generate feature, the prompt text and/or reference image you submit is sent to QuiverAI's API to produce the generated SVG. This only happens when you click Generate; nothing is sent for the rest of the editor. QuiverAI privacy policy.
• Supabase — handles account authentication (signing in) and stores your account profile, cloud projects, and usage counters (like exports and auto-traces used this period) in its database. Supabase privacy policy.
• Paddle — our merchant of record for paid plans. If you subscribe, Paddle processes your email address, payment details, billing address, and tax information under its own privacy policy; SVG Lab does not see or store your card details. Paddle privacy policy.

For metered Pro features — auto-trace, exports, and AI generations — we log a per-account usage event each time you use them: the timestamp, which feature was used, your IP address, and your browser's user-agent string. This is used to enforce plan quotas, prevent abuse, and, where needed, as evidence in payment disputes. These usage logs are kept for up to 24 months.

What we don't collect

• No traditional advertising cookies.
• No advertising pixels, no behavioural retargeting, no fingerprinting beyond the anonymous browser-session identifier described above.
• No cross-site tracking — the analytics above only see what happens on svglab.app.
• No copy of your drawings on our servers — there are no servers that store user content yet.
• No session replay or screen recording.

Opting out

If you'd rather not be counted at all, you have a few options:

• Turn on Do Not Track in your browser. Cloudflare Web Analytics honours it automatically.
• Use a privacy-focused browser extension like uBlock Origin or Privacy Badger to block the analytics endpoints.
• Run the editor from a local copy: clone the repository and open index.html from your filesystem — none of the analytics fire from file:// or localhost.

What changes when accounts arrive

In the future, we plan to add optional sign-up via Google or magic-link email so you can sync your work across devices. When that ships:

• Sign-up will always be optional. The editor itself stays free and usable without an account.
• If you sign up, we'll store your email address, your account ID, and the project files you choose to save to the cloud.
• This policy will be updated and dated before that goes live.

Third-party services we use

• Cloudflare hosts the site, provides DNS, the CDN, DDoS protection, and the cookieless analytics described above. Their privacy policy is at cloudflare.com/privacypolicy.
• PostHog provides the product-analytics described above. We use the EU/US Cloud service. Their privacy policy is at posthog.com/privacy.
• Sentry provides the error-monitoring described above. Their privacy policy is at sentry.io/privacy.
• QuiverAI processes the AI Generate requests described above. Their privacy policy is at quiver.ai/legal/privacy.
• Supabase provides account authentication and stores account, project, and usage-counter data as described above. Their privacy policy is at supabase.com/privacy.
• Paddle is the merchant of record for paid plans and processes payment, billing, and tax data as described above. Their privacy policy is at paddle.com/legal/privacy.

Your rights

If you're signed in, your account profile, cloud projects, and billing details are stored with Supabase and Paddle as described above, and you can review most of it directly in the app: Account for your profile, My Projects for saved projects, and Billing for your subscription and usage. To correct, export, or delete your account data — including cloud projects, usage logs, and billing records where we control them — email support@svglab.app. If you've never signed in, clearing your browser's site data for svglab.app removes everything SVG Lab put there locally.

Children

SVG Lab is a general-purpose creative tool with no targeted features for children, no advertising, and no data collection. It's safe for any age.

Changes to this policy

If we change what's collected, this page will be updated and the date at the top will be revised. Significant changes will also be flagged in the editor itself.

Contact

Questions? Reach the maintainer through the project's GitHub repository or the in-app feedback widget once it ships.