Privacy Policy

Last updated: 20 September 2026

This policy explains what data Design Beaver ("we", "us") collects, why, and the choices you have. Design Beaver is an AWS architecture diagramming tool operated by Milin Paul. It covers both the marketing site (designbeaver.app) and the app (app.designbeaver.app).

The short version

• There are no accounts. Your diagrams are stored locally in your browser, not on our servers — we never see them.
• We collect your email only if you choose to join the waitlist.
• We use privacy-friendly, cookieless product analytics and a sampled, input-masked session replay to understand how the tool is used and improve it.
• You can opt out of analytics at any time, and we honour your browser's Do Not Track / Global Privacy Control signal automatically.

What we collect

Diagrams you create

Diagrams you build in the app — including node/connection data, names, and any sticky notes or comments — are saved to your browser's local storage (IndexedDB) on your own device. They are not uploaded to us and we cannot see them. Clearing your browser's site data removes them, and they don't follow you to another browser or device, so export important work (the app exports YAML, SVG and PNG).

Waitlist email

If you join the marketing site's waitlist, we collect the email address you submit so we can contact you about access and product updates. This is processed and stored by our email provider, Resend.

Usage analytics

We collect standard, aggregate usage data — pages viewed, features used, approximate location (derived from IP, not stored as a precise location), device and browser type, and referring links — to understand what's working and what to improve.

Session replay

A sampled subset of sessions is recorded as an anonymised replay of on-screen interactions.All form inputs and free-text you enter are masked (including your email and any diagram names or notes), so the content you type is not captured in the clear.

Server logs

Our hosting provider (Vercel) processes standard request logs, including IP addresses, as a normal part of serving the site and app securely.

Cookies & local storage

Our product analytics (PostHog) is cookieless — it uses your browser's local storage rather than tracking cookies. Google Analytics, when enabled, may set its own cookies to measure usage. We also use local storage for essential preferences, such as remembering that you dismissed the privacy notice or opted out of analytics. Opting out (below) stops Google Analytics from loading at all.

Who we share data with

We use a small number of trusted processors to run the service:

• Vercel — hosting and infrastructure.
• Google Analytics — usage analytics.
• PostHog — cookieless product analytics and session replay.
• Resend — waitlist email delivery and storage.

We do not sell your personal data.

International transfers

These providers may process data in the United States. Where we transfer data from the EEA or UK, we rely on the providers' standard contractual clauses and equivalent safeguards.

Legal basis (EEA/UK)

We rely on our legitimate interest in understanding and improving the product for privacy-friendly analytics, and on your consent where required — which you can withdraw at any time via the opt-out below. Waitlist email is processed on the basis of your request to be contacted. Your diagrams never reach us, so there is no processing of them to have a basis for.

Your choices & opt out

You can opt out of all analytics and session replay on this site. We also automatically treat a browser Do Not Track or Global Privacy Control signal as an opt-out. Waitlist emails always include an unsubscribe link.

Data retention

Diagrams live only on your device, for as long as you keep them. Analytics data is retained by our providers per their standard retention windows, and waitlist emails are kept until you unsubscribe or ask us to delete them (see Your rights).

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict its processing.

Your diagrams are yours to delete at any time: remove them in the app, or clear the site's data in your browser. Nothing about them is held on our side, so there is nothing further for us to remove.

Everything else — your analytics records with PostHog, and your waitlist contact with Resend if you ever subscribed — is removed on request. Email hello@designbeaver.app and we'll clear those. The same address reaches us for any other right above.

Children

Design Beaver is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy or your data? Email hello@designbeaver.app.