FreeDiagram is built on a no-account principle: we do not ask you to sign up, and we do not collect your name, email, or any personally identifying information. This policy explains the limited data we do handle when you generate a diagram.
What we collect
Each time you click Generate, we write one record to our database containing:
- A hashed IP address — your IP is passed through SHA-256 with a rotating salt before storage. The hash is not reversible; it exists solely to enforce the per-hour rate limit and deter abuse.
- Your prompt text — the description you type, stored for abuse detection and cost reconciliation. It is not linked to any user identity.
- The generated output — the diagram source and metadata (type, token counts, status, latency). Used for quality monitoring.
- Timestamp — used for rate-limit windowing and operational monitoring.
What we do not collect
- Name, email, or any account information
- Payment information (the Service is free)
- Device fingerprints or cross-site tracking identifiers
Third-party services
OpenRouter / Google Gemini — your prompt is sent to an AI model (via OpenRouter) to produce the diagram. Their respective policies govern how they process inference requests.
Cloudflare Turnstile — a privacy-friendly, no-cookie challenge used to tell humans from bots on the Generate endpoint.
Plausible Analytics — a self-hosted instance for aggregate traffic stats. No cookies, no individual tracking, no personal data.
Google AdSense — the Service may display ads served by Google AdSense, which can use cookies and similar technologies. You can opt out via Google’s ad settings.
Sentry — error monitoring. Anonymized stack traces only.
Data retention
Generation records (hashed IP, prompt, metadata) are retained for up to 90 days for operational purposes, then deleted.
Your rights
Because we do not link any data to a user identity, we cannot look up, export, or delete records individually on your behalf. For GDPR or other privacy questions, contact us at hello@freediagram.app.
Children
The Service is not directed at children under 13.
Changes to this policy
We may update this policy as the Service evolves. The “last updated” date above will reflect any revision.