Privacy Policy

• Images and edits: Images you open and the edits you make are processed in your browser. The editor does not upload them to visdraw servers for image processing.
• Account and authentication information: If you choose to sign in, we process your email address, display name, profile image (if available), sign-in provider identifier, OAuth token data used to maintain the Google account connection, and account timestamps. Email passwords are stored only as one-way hashes; we do not store readable plaintext passwords.
• Session and security information: To keep you signed in and prevent abuse, we process session tokens, expiration times, IP addresses, and browser user agents. Email codes are stored briefly in hashed form and expire after 5 minutes.
• Local preferences: Cookie choices, editor layout preferences, usage hints, and saved presets may be stored in your browser’s local storage.
• Pro preset sync: When you sign in with Pro access, preset names and editing parameters are automatically merged with your account and stored in Cloudflare D1 for use across devices. This includes local presets that have not yet been synced. Your images are not included.
• Purchases: Creem processes checkout and payment information. We store your account, product, order and customer identifiers, purchase time, and access or revocation records to manage Pro access. We do not receive or store payment card details.
• Support messages: If you contact us by email, we receive the information you choose to include in your message.

• To create and maintain your optional visdraw account and sign-in session
• To complete email-password or Google sign-in and send email verification or password reset codes
• To save preferences and editor presets on your device
• To synchronize Pro presets across devices and grant, verify, or revoke paid access
• To respond to support requests
• To protect and operate the service and comply with legal or security obligations

Images and edit state stay in browser memory during the editing session; saved presets and preferences remain in local browser storage until you remove them. Account, sign-in provider, session, Pro preset, and billing access records are stored in Cloudflare D1. Signing out stops preset synchronization but does not remove existing local or cloud presets. Clearing browser storage does not delete cloud records. Account records are retained while the account remains active; sessions are managed according to their expiration, and signing out revokes the current session. We use reasonable safeguards for systems we control, but no method of storage or transmission is completely secure.

• Google OAuth: Used only when you choose “Continue with Google” to verify your identity and provide basic profile information. Google’s own privacy policy applies to its processing.
• Cloudflare: Runs the service through Workers, stores account, Pro preset, and billing access records in D1, and sends the email verification and password security messages you request through Email Service.
• Creem: Provides checkout, payment processing, and purchase, refund, and dispute notifications. Its own privacy policy applies to the information you provide during checkout.
• visdraw uses Google AdSense to provide advertising on some pages. Google may use cookies or similar technologies to serve and measure ads, subject to applicable law and your choices. The editor continues to use standard browser capabilities to process images locally.

• Keep using the editor as a guest without signing in
• Sign out at any time or remove authentication cookies through your browser
• Clear site cookies or local storage through your browser
• Reset locally saved preferences and presets by clearing this site’s browser data
• Contact us to request access to, correction of, or deletion of your account information, or to make another privacy request

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.