Privacy policy

What we collect

When you create an account, we receive your email address, profile details, and sign-in identifiers from the authentication method you choose. Cloud features store the drawings, files, workspace information, and collection content you upload. We also process payment references and subscription status, support correspondence, and technical information such as IP addresses and request logs needed to operate and secure the service.

Local and shared content

Device-only canvases are stored in your browser. Using cloud sync, publishing, uploads, or collaboration sends the relevant content to the services that provide those features. Public collections, creator profiles, and content you share can be accessed by their audiences. Avoid publishing personal information you do not want others to see.

How we use information

We use information to sign you in, save and share your work, process purchases, provide support, send service messages, and prevent abuse. We do not sell your personal information. We do not use your private drawings to train AI models.

Service providers and payments

Hosting, storage, email, authentication, and payment providers process information needed to deliver the service. These include Vercel, Railway, Cloudflare, Resend, PostHog (product analytics, EU region), and the sign-in and payment providers you use. Payments are handled by Polar or Razorpay where available; Blankpaper does not store full card numbers or security codes. Providers may process data in countries other than your own and apply their own privacy terms to services they provide directly.

Product analytics

To learn which pages lead to useful drawings and where people get stuck, we record a small number of product events with PostHog (hosted in the European Union): the kind of page a visit started on, how the editor was opened, that a drawing was saved or exported, that a community resource was copied, that a cloud feature was requested, and, for accounts, sign-up, checkout, payment and publication milestones. These events carry no drawing content, titles, file names, links, search terms or email addresses. Collection is off until you opt in below. Consented browsers share a random identifier and daily event limits across tabs using browser storage; no analytics cookie is set. Signed-in accounts require their own saved choice and use an opaque account id. We honour Global Privacy Control and Do Not Track. Turning collection off stops browser events immediately, clears local analytics state, and, when signed in and online, disables account events and removes pending server copies. If the account update fails, we show that it needs to be retried. Already delivered events remain subject to the retention period and deletion requests. Raw events are kept by PostHog for up to one year; we keep only aggregate counts longer.

Cookies and browser storage

We use cookies and browser storage to keep you signed in, remember preferences, store device canvases, and remember your analytics choice. Clearing browser data can remove local drawings and sign you out. Your browser lets you manage cookies and storage; blocking required storage may prevent some features from working.

Retention and your choices

We retain account and cloud information while needed to provide the service. Some billing, security, and backup records may remain longer for legal obligations, fraud prevention, or recovery. You can export your drawings and contact support@blankpaper.dev to request access, correction, or deletion of personal information and account data. We may verify your identity before acting. Copies already downloaded or shared by others may remain outside our control.

Questions and updates

Contact support@blankpaper.dev for privacy questions or requests. If you believe your rights have not been respected, you may also contact the relevant data protection authority. We will update this page when our practices change and communicate material changes through the service or email.

Your analytics choice