Privacy policy
Without an account
The editor keeps your diagram and settings in your browser's local storage. Share links carry the diagram in the part of the URL after #, which browsers do not send to our server. We do not use analytics or advertising cookies.
With an account
When you sign in with GitHub or Google we store that provider's id for you, your display name, avatar URL and email address, and whether the provider has verified the email. If two sign-ins share a verified email, we connect them to one account. We store the diagrams you save, their earlier versions on Pro, your API keys in hashed form, and a monthly count of your API calls. A session cookie keeps you signed in for up to 30 days.
Payments
Stripe processes payments. We receive your Stripe customer id and subscription status, never your card number. Stripe's privacy policy applies to the data you give Stripe.
Processors
Cloudflare hosts Volley and stores its database. GitHub and Google provide sign-in. Stripe handles billing.
Retention
We keep account data while your account exists. Deleted diagrams are removed from the database immediately; backups expire within 30 days. We keep billing records as long as tax law requires.
Your rights
You can access, export or delete your diagrams in the app, and ask for a copy or deletion of your account data by writing to support@volley.sh. Depending on where you live you may also have the right to object, restrict processing and complain to a supervisory authority.