Privacy by design

Privacy and local data

Your equations and projects stay in your browser unless you deliberately export a file or create and share a link. Usage analytics never include equation or project content.

No equation collectionProject content is never an analytics field.

Local-first storageNo account or cloud database is required.

Your deletion controlBrowser site-data controls remove local records.

Version 1 policy · Last updated September 6, 2026

01 · On this device

What is stored locally

The application uses browser storage only to provide features you can see and control:

IndexedDB: your versioned graph projects and bounded recovery snapshots for each project.
Local storage: interface preferences such as open-project order, motion, and onboarding dismissal.
Cache Storage: application code, fonts, icons, and public pages required for offline use.

Local saving is not cloud backup. Clearing browser data, private-browsing behavior, device failure, or storage eviction can remove it; export a .gcalc file when you need a portable backup.

02 · Usage measurement

Google Analytics

Google Analytics 4 is enabled across the public application to measure page views and a small set of coarse product events. The site does not send Google a user ID, account identity, equation, project title, or project content.

Standard Google Analytics page-view processing may include the requested page path, page title, referrer, browser and device information, a pseudonymous browser identifier, and approximate location derived from the network connection. Google states that GA4 discards IP addresses before they are logged.

The application adds only these validated product-event categories:

First successful graph, with an expression-count bucket
Input-error category, never the entered text
Supported analysis type used
Export or print format used
Coarse device-performance tier
Plot-worker failure category

Never included: equations, project titles, slider values, graph coordinates, imported files, exported file contents, share tokens, typed text, names, email addresses, advertising identifiers, or fingerprinting data.

Google processes this analytics data under its own terms and privacy policy. Browser privacy controls, content blockers, or blocking Google’s analytics domains may prevent collection without affecting calculator functionality.

03 · User initiated

Exports and sharing

A project or PNG export is created locally and downloaded through your browser. The application does not upload those files.

When you choose Create share link, the current validated project is compressed into the URL fragment. It is not sent to a GraphingCalculator.io server by the application, but anyone who receives the complete link can open that project. Messaging services, browser history, screenshots, or copied text may retain a link you share.

04 · Your control

How to delete your data

Export any project you want to keep.
Open your browser’s site settings for graphingcalculator.io.
Choose the option to clear site data or storage. This removes IndexedDB projects, preferences, Google Analytics cookies, caches, and service-worker data for this site.
Delete downloaded .gcalc or PNG files separately through your device.

Share links already sent to other people cannot be recalled because Version 1 has no link database or server-side account.

05 · Operations

Hosting, security, and contact

The application is designed for static hosting. Cloudflare may process normal request information such as IP address, timestamp, requested path, and user agent for delivery, abuse prevention, and access logs. Google processes the analytics information described above. Neither integration receives equation or project content from the application.

Production policy requires restrictive browser headers, encrypted HTTPS delivery, pinned dependencies, reviewed updates, and no frontend secrets.

Privacy or security questions can be sent to privacy@graphingcalculator.io. Do not include private equations or project files in an initial vulnerability report.