Privacy Policy

Last Updated: May 31, 2026

1. Data Collection & Storage

PinePaper Studio is a client-side application. We do not collect, transmit, or store your creations, images, imported SVGs, or any design files on our servers. All processing happens locally within your browser.

What this means:

• Your designs never leave your device unless you explicitly export them
• No cloud storage or server-side processing
• No account registration required
• Complete control over your creative work

2. Browser Storage

We use your browser's Local Storage and IndexedDB to save your work and preferences locally. This includes:

• UI theme preferences (light/dark mode)
• Last used tool and settings
• Language preference
• Saved designs and session history (via IndexedDB for larger storage capacity)
• Undo/redo history snapshots
• Template usage data and user templates

This data never leaves your device. PinePaper uses IndexedDB for project persistence — there is no practical size limit. You can clear all stored data at any time through your browser settings (Settings → Privacy → Clear browsing data → Cookies and site data).

3. Analytics

Why we use analytics: to understand which features are used, to spot bugs that hit real users, and to improve the product. We do not sell, share, or use this data for advertising or behavioural profiling. The hosted editor at pinepaper.studio is and will remain free to use — analytics fund product development, not third-party targeting.

We use Google Analytics 4, configured with Consent Mode v2 in default-denied mode. That means until consent is granted, GA4 does not set cookies, does not send a page view, and queues events without dispatching them. We also pass anonymize_ip: true on every config call.

What GA4 receives when consent is granted:

• Pseudonymous client ID stored in a _ga cookie (under GDPR Article 4 this is personal data — that is why we use Consent Mode)
• Aggregate usage events: which features are used, export formats chosen, time spent
• Technical context: browser type, screen resolution, country-level location (IP is anonymized before storage)

What GA4 never receives: the content of your designs, the text you type into items, the images you import, or any data from your actual creative work. Design data is processed entirely in your browser and is never transmitted to our servers or to Google.

Opting out

You have three ways to disable analytics on the editor. Any one of them is honored automatically:

• "Don't track me" button in the editor footer. One click, persisted to your browser, immediately revokes Consent Mode (no reload needed).
• Do Not Track browser preference (navigator.doNotTrack). If your browser sends DNT, analytics are auto-disabled for the session and the footer button shows the blocked state.
• ?notrack=1 URL parameter — per-page-load disable, useful for shared previews where you don't want collaborators tracked.

Developer access: window.editorAnalytics.disable() in your browser console does the same as the footer button. Full reference at /api/ → docs/telemetry.md.

Regional privacy law compliance. Consent Mode v2 default-denied is the Google-blessed pattern for the EU/UK GDPR, the California CCPA/CPRA (treated as a "Do Not Sell or Share" signal), and the UK PECR cookie rules. We do not use a separate Consent Management Platform — the opt-out controls above are the consent mechanism. If you operate under stricter obligations, your CMP can call editorAnalytics.disable() from its "Reject all" callback.

What the opt-out does not do: delete data that was already collected before you opted out (use Google's user-deletion request for that, scoped to your GA Client ID), or clear an already-set _ga cookie (clear browser cookies for pinepaper.studio to remove it).

4. Error Tracking & Debugging

We use Sentry to monitor application errors and improve product quality. When an error occurs, Sentry collects:

• Error details: Stack traces and error messages to help us diagnose issues
• Browser information: Browser type, version, and operating system
• Anonymous user ID: A randomly generated identifier stored locally (not linked to personal data)
• App state: Canvas size, item count, and current mode (to help reproduce bugs)

Sentry does NOT capture:

• Your design content, text, or images
• Personal information (we don't collect names or emails; IP addresses are handled by Sentry's privacy controls)
• Keystroke or mouse activity

Error tracking data is minimized to only what is necessary to diagnose and fix bugs that affect real users.

5. AI Agents & API Usage

If you use an AI agent (like Claude, ChatGPT, or other assistants) to interact with PinePaper Studio through our API, please note:

• The data exchange occurs between your browser and the AI agent provider
• PinePaper Studio does not intercept, log, or store these API interactions
• Your AI provider's privacy policy governs how they handle your requests
• All design work still happens locally in your browser

MCP Integration: PinePaper supports the Model Context Protocol (MCP) via our open-source MCP server. MCP communication is direct between your browser and your chosen AI assistant — no data passes through PinePaper servers. The source code is publicly auditable under the MIT license.

6. Language & Localization Data

PinePaper Studio supports 59 languages. Your language preference may be stored in Local Storage/IndexedDB or detected from your browser settings. We do not collect or analyze:

• The content you write in any language
• Your specific linguistic patterns or writing style
• Personal information based on language selection

7. Cookies

We use minimal cookies for:

• Google Analytics: Anonymous usage tracking (can be blocked with browser extensions)
• Language preference: Remember your chosen language across visits

We do NOT use cookies for:

• Advertising or tracking across websites
• User profiling or behavioral targeting
• Third-party marketing purposes

8. Third-Party Services

PinePaper Studio integrates with the following third-party services:

• Google Analytics: Analytics and performance monitoring (Privacy Policy)
• Sentry: Error tracking, debugging, and product improvement. Sentry helps us identify and fix bugs by collecting anonymous error reports when issues occur. No personal data or design content is captured. (Privacy Policy)
• UserJot: Feedback and feature requests (Privacy Policy)
• Cloudflare: CDN and performance optimization (Privacy Policy)

9. Exported Files

When you export your designs as MP4, GIF, SVG, or PNG files:

• Files are generated entirely in your browser using WebCodecs (MP4) or gif.js (GIF)
• Downloads go directly to your device
• We never see, store, or have access to these exported files
• What you do with exported files is entirely under your control

10. Data Retention

Since we don't collect personal data or store your designs on our servers, there is no data retention period for your creative work. Browser storage data persists in your browser until you clear it.

Anonymous analytics data is retained according to Google Analytics' standard retention policies.

11. Your Rights

You have the right to:

• Access: View what data is stored locally in your browser
• Delete: Clear all local data at any time via browser settings
• Opt-out: Block Google Analytics with browser extensions like uBlock Origin
• Export: Export your designs at any time in multiple formats

12. Children's Privacy

PinePaper Studio does not knowingly collect information from children under 13. Since we don't collect personal data, the tool can be safely used by students and young creators under parental supervision.

13. International Users

PinePaper Studio is available globally in 59 languages. Since all processing happens in your browser, your data never crosses international borders through our service. Your exports remain on your device unless you choose to upload them elsewhere.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be announced on the main page. Continued use of PinePaper Studio after changes indicates acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, please contact us through our feedback form.