Docs / Your account
Data and privacy
What leaves your browser, what Volley stores, and who can see it.
This page describes how Volley handles the content of your diagrams and recordings. For the legal details, see the privacy policy and terms.
What stays in your browser
- Drafts. Signed out, the diagram you are writing is stored in your browser's local storage, along with your layout, zoom and appearance settings. Nothing about it is sent to Volley.
- Share links. A share link carries the whole diagram after the
#in the address. Browsers do not send that part of an address to any server, so Volley never receives or stores share links. - HAR files. When you import a HAR file or run a drift check, the file is read in your browser. It is never uploaded.
- Recording links. Your customer's HAR file is read in their browser. Only the redacted diagram text they approve is sent.
- Downloads. SVG, PNG and
.volleyfiles are made in your browser.
What Volley stores
When you are signed in, Volley stores:
- your name, avatar and email address from GitHub or Google, and a session that lasts up to 30 days;
- the diagrams you save, their versions on Pro, and your collections;
- webhook deliveries captured by your inboxes, up to your plan's per-inbox limit;
- recordings sent to your recording links;
- API keys, as a one-way hash. Volley cannot show you a key again after you create it;
- counts of your monthly usage.
Redaction
Volley removes secrets when it turns traffic into diagrams:
| Source | When secrets are removed |
|---|---|
| HAR import | In your browser, before the diagram is created |
| Recording links | In your customer's browser, before anything is sent |
| Webhook inboxes | Credential headers when a delivery is stored; secrets in bodies when you draw the diagram |
| Drift check updates | In your browser, as fields are added |
Redaction replaces values with <redacted> for credential headers such as Authorization and Cookie, and for fields whose names look secret, such as password, client_secret, access_token, api_key and session. It goes by names, so a secret under an ordinary name can slip through. Check a diagram before you share it.
Who can see what
| Thing | Who can open it |
|---|---|
| A draft in your browser | Only people using that browser |
| A share link, snapshot link, presentation link or snapshot embed | Anyone who has the link, regardless of visibility settings |
| An unlisted saved diagram or collection | Anyone who has the link |
| A private saved diagram or collection | Only you |
| A README embed | Anyone who can see the page, for unlisted diagrams only |
| Webhook inboxes and recordings | Only you |
Collections at their .md agent address | Anyone with the address, for unlisted collections; private diagrams are left out |
Saved diagrams and collections are never listed publicly, and their pages tell search engines not to index them.
Deleting things
- Deleting a diagram removes it, its versions and its short link at once.
- Deleting a webhook inbox removes its deliveries; Clear requests removes deliveries and keeps the inbox.
- Deleting a recording link stops it working at once. Delete recordings one by one with Delete this recording.
- Revoking an API key stops it working at once.
- To delete your whole account, email support@volley.sh.