Privacy Policy
Effective 22 October 2026
The short version
- Your files and pasted data are processed entirely in your browser. They are never uploaded, because GraphMaker has no server to upload them to.
- There are no accounts, no cookies and no ads. We count page visits with Cloudflare Web Analytics, which does not use cookies or identify you.
- A few display preferences are saved in your own browser and never leave it.
- Loading the page fetches fonts and code from a small number of third-party services, which see ordinary request data such as your IP address. They never receive your data.
Who we are
This policy covers the GraphMaker website and web app (the “Site”). “We” and “us” mean the people who run GraphMaker. Questions about this policy can be sent to the address in Contact.
The data you chart
When you open, drop or paste a CSV, TSV, text or Excel file, its contents are read by code running inside your browser tab. CSV and TSV files are parsed by JavaScript. Excel workbooks, data preparation, statistical overlays and machine-learning models run in Python compiled to WebAssembly (Pyodide), which also runs inside your tab.
We do not receive, store or see your files, the values in them, the charts you make or the models you train. Closing or reloading the tab discards it all. Charts and data you export (PNG, JPEG, WebP or CSV) are saved directly to your device by your browser.
Information saved in your browser
To keep the app looking the way you left it, GraphMaker saves a few preferences in your browser’s
localStorage. This works like a cookie, except that it is never sent to any server.
| Key | What it holds |
|---|---|
graphmaker-theme | Whether you chose the light or dark theme |
graphmaker-palette | The colour palette you picked for charts |
graphmaker-style |
Chart presentation settings such as legend position, gridlines, line width, number format and export size. Settings tied to a particular file (axis bounds, axis titles, reference lines) are deliberately left out. |
None of these contain your data or anything that identifies you. You can remove them at any time by clearing site data for this website in your browser settings. GraphMaker still works without them; it just forgets your preferences.
Website analytics
We use Cloudflare Web Analytics to understand, in aggregate, how many people visit the Site, which pages they view, where visits come from and how quickly the Site loads. Cloudflare adds a small script to each page that reports, for each page view:
- the page address and the referring page (the site that linked you here, if any);
- your browser, operating system and device type, derived from the user agent;
- your approximate country, derived from your IP address;
- page-load and performance timings.
Cloudflare Web Analytics does not use cookies or localStorage, does not fingerprint your device and
does not track you across visits or across other websites. We see only aggregated totals, never individual
visitors. The script has no access to your files, your data or your charts; it only reports that a page was
viewed. Cloudflare processes this information under its
Web Analytics terms and
privacy policy.
If your browser or a content blocker prevents the analytics script from loading, GraphMaker works exactly the same.
Clipboard
GraphMaker writes to your clipboard only when you click a copy button (for example to copy a chart image or a statistics table). Pasting a table uses your browser’s normal paste action. The app never reads your clipboard in the background.
Third-party services
Like any website, the Site has to be delivered to your browser, and some of its parts come from other providers. When your browser contacts them, they receive standard technical information that comes with every web request: your IP address, browser and operating system (user agent), the page that made the request (referrer) and the time. They never receive your files or data. Each provider handles this information under its own privacy policy.
-
Cloudflare hosts the Site on Cloudflare Pages and provides the page-view analytics described
in Website analytics (
static.cloudflareinsights.com,cloudflareinsights.com). Cloudflare may process request information to serve the Site and protect it from abuse. Cloudflare privacy policy. -
Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) serves the Inter typeface. Google Fonts privacy FAQ. -
jsDelivr (
cdn.jsdelivr.net) serves the Pyodide runtime and the Python packages it uses (such as openpyxl, pandas, SciPy and scikit-learn). The runtime starts downloading in the background when the page loads; on Data Saver or very slow connections it waits until you open an Excel file. Packages for optional features are fetched the first time you use them. jsDelivr privacy policy. -
Python Package Index (
pypi.org,files.pythonhosted.org) may be contacted, only if a needed Python package is not available from jsDelivr. PyPI privacy notice.
Links to other websites (such as the Chart.js, Pyodide or openpyxl sites) are governed by those sites’ own policies once you follow them.
What we do not do
- We do not use cookies.
- We do not run advertising, session-recording or cross-site tracking scripts. The only analytics is the cookieless Cloudflare Web Analytics described above.
- We do not require or offer accounts, and we do not collect names, email addresses or payment details.
- We do not sell or share personal information, and we do not build profiles of visitors.
- The Site tells browsers to block camera, microphone and location access, and opts out of interest-based cohort tracking.
Your rights
Depending on where you live, laws such as the EU and UK GDPR or the California Consumer Privacy Act give you rights to access, correct, delete or object to the processing of your personal information. GraphMaker does not collect or store personal information about you, and the analytics we see are aggregate totals that cannot be linked to an individual, so we usually have nothing to provide, correct or delete. The preferences in your browser are under your own control, as described above. For request data held by the providers listed under Third-party services, contact them directly or reach out to us and we will help where we can.
Children
GraphMaker is a general-purpose tool and is not directed at children. Because we do not collect personal information from anyone, we do not knowingly collect it from children under 13 (or the equivalent age where you live).
Changes to this policy
If the way GraphMaker handles information changes, for example if a feature ever needed to send data off your device, we will update this page and its effective date before the change takes effect.
Contact
Questions or requests about privacy: graphmakerweb@proton.me.