Privacy
Privacy policy
Short version: what you draw stays in your browser. There are no accounts and nothing you draw is sent anywhere. Analytics runs only if you allow it, and never sees your boards.
Last updated: 8 November 2026.
What stays on your device
Whiteboard Diagram saves these in your browser’s own storage, on your device only:
- Your boards: their shapes, text, connectors and images, with a small picture of each for the board list (in IndexedDB).
- Versions you save of a board, up to 20 each, deleted with the board (in IndexedDB).
-
Your settings: theme, grid, snapping and the diagram kind (in
localStorage). -
Each tab’s place: which board it shows and where you’d scrolled to (in
sessionStorage, gone when the tab closes). - The app itself, cached so it works offline (by its service worker).
-
Whether you accepted analytics and when, so the cookie bar stays hidden
once you have (in
localStorage).
None of this is sent to us or anyone else. We can’t see your boards and couldn’t recover them for you, which is why Settings → Backup exists.
What leaves your device
Only the requests any website needs: your browser downloads the app’s files (pages, code, fonts and icons) from this site. Fonts are served from this site too, not from a font service. Like any web host, the site’s servers may keep standard access logs (such as IP address, time and the file requested) for security and to keep the site running; they never contain your boards.
Files you export (PNG, SVG, PDF, Mermaid, board files and backups) are made in your browser and saved where you choose. What you do with them is up to you.
Analytics (only if you allow it)
A bar at the bottom of the page asks whether we may use Google Analytics to count visits and see which features are used, so we know what to improve. Until you choose Accept, nothing from Google is loaded and no cookies are set. The bar stays until then, and the site works the same either way.
If you choose Accept, Google Analytics receives:
-
the page you’re on (its address without anything after
?or#) and a fixed page name, such as “Whiteboard” or “Diagram guide”; - which features you use, from a fixed list: for example that you made a new board or used a template, switched to the mind map diagram, ran auto layout, chose the hand-drawn look, exported a PNG, imported Mermaid text, presented or chose a theme;
- what every browser sends with a request: your IP address (Google doesn’t store it), browser, device type, screen size, language and approximate location (country or city).
It never receives your boards or anything from them: no shapes, text, board titles, file names, images or Mermaid text. Google signals and ad personalization are turned off.
Google Analytics sets two cookies, _ga and _ga_<id>, to
tell visits apart; they last up to two years. Google processes the data for us and may do
so in the United States; see
how Google uses information from sites that use its services.
A note on security: once allowed, Google’s script runs in this site like our own code, so it could technically read what your browser stores for this site, your boards included. We rely on Google’s official script doing only what it’s documented to do. If that isn’t acceptable for your boards, don’t accept: the app works exactly the same.
Changing your answer: in the app, Settings → Privacy → Usage statistics; on these pages, Cookie settings (also in the footer). Turning it off stops all sending, deletes the cookies and brings the bar back.
The site uses no advertising.
Deleting your data
- Delete a board from the board list (you can restore it right after).
- To remove everything, clear this site’s data in your browser’s settings (often under “Cookies and site data”). This deletes every board, so back up first if you want to keep any.
Children
The site doesn’t knowingly collect personal information from children. Analytics, if allowed, works the same for everyone and never sees what’s drawn.