Gallerydraft ("the Service") is an app for planning exhibitions in 3D, available in the browser (gallerydraft.app) and as an iPhone and iPad app (App Store). This page explains what information the Service handles and where it is stored.
The Service does not require an account. The plans you create are stored inside your browser (IndexedDB / localStorage) and are not sent to the operator's servers. The operator never sees the contents of your plans.
Only if you choose "Sign in with Google", the Service receives the following from Google:
drive.file scope)With this permission the Service creates a "Gallerydraft" folder in your Google Drive and saves, updates and reads your plan files there. It cannot access anything else in your Drive. The data travels directly between your browser and your own Google Drive; it never passes through the operator's servers.
The Service's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
"Sign out" in the Service revokes the permission. You can also revoke it at any time under Third-party access in your Google Account. You are free to delete the "Gallerydraft" folder in your Drive.
Paid plans are not on sale at present and no payment system is in place, so the operator never receives card numbers or other payment details. When paid plans begin, the payment provider and the information the operator receives will be added here.
The Service uses browser storage needed for it to work (display settings, language, the time of your last backup, and so on). It does not use cookies for advertising or tracking.
The marketing pages (gallerydraft.com) use Cloudflare Web Analytics, provided by Cloudflare, Inc., to understand in aggregate how many pages are viewed and which sites, countries and devices visitors come from. It does not use cookies or on-device storage and does not track visitors across sites. The page URL, referrer, browser type and page load timings are sent to Cloudflare; the operator only sees aggregated figures.
When you press "Create link" under "Share" in the app, a copy of that plan (room, works and photos included) is stored on our server (Cloudflare storage) and a view-only URL is created. Anyone who knows the URL can view the plan without signing in. The creator can update the link to the current plan or delete it; deleting removes the copy from the server. Share links are deleted automatically 10 days after they are created or last updated. Unless you create a share link, your plan is never sent to our server.
If you sign in with Google and set the name others see while co-editing, we store that name with your Google account ID so it is the same on every device. Clearing the name deletes it. Names set by guests who are not signed in are stored only on their own device.
The website and the app count, anonymously, how many times a page was opened, how many times the app was opened and for how long, and how many times someone signed in with Google. No IP address, name, email address or plan content is sent, and no cookies are used. These counts are deleted after 40 days.
We also count how many people have signed in with Google, per day and in total. To do this we record a one-way cryptographic hash of the Google account ID, together with the date of the first sign-in. No email address or name is recorded. The daily records are deleted after 40 days; the records used for the total are kept for as long as the Service is provided.
When you send a report from "Feedback" in the app, we store on our server the type (bug, request or comment), what you wrote, your reply email address (only if you enter one), your browser or OS type, screen size, display language, the time it was sent and your country (only the country name derived from your IP address); it is also forwarded to the operator's email. The IP address itself is not stored. We use it only to respond; contact us if you would like it deleted.
The App Store version follows the same principles as described above. The differences are:
Plans stored in the browser are lost when you clear the browser's history or site data. In a private window they are lost when the window is closed. They do not carry over to another browser or device. To keep a copy, use "Save to file" in the app or turn on auto-save to Google Drive. The operator cannot recover data stored in your browser.
This policy may be revised to reflect changes in law or in the Service. Significant changes will be announced on the marketing page.