Privacy Policy

Last updated: [date to be set at launch]

Draft notice (remove before launch): this page was drafted by an AI assistant based on how Roughout actually works, as a starting point — it is not legal advice, and hasn't been reviewed by a solicitor. In particular, confirm the exact server access-log behaviour with whatever's actually configured on the hosting box before publishing, and fill in the bracketed placeholders.

1. The short version

Roughout's web app doesn't have user accounts, doesn't use cookies or analytics, and doesn't store or log your diagrams. The Mac app doesn't talk to our servers at all. This policy exists mainly to say that plainly and explain the couple of places data briefly passes through anyway.

2. The web app

When you use the "create a shareable link" feature, the diagram text you're working on is sent to our server just long enough to generate that link — the entire diagram is encoded directly into the link itself, not saved to a database or referenced from one. We don't store, log, retain, or share that content afterward. Editing a diagram locally in your browser, without generating a link, never sends anything to our server at all.

We don't use cookies, analytics, or third-party tracking scripts on this site or in the web app, as of the date above. If that ever changes, we'll update this policy to say so before it does.

Like most web servers, the infrastructure hosting this site may keep standard technical access logs (e.g. IP address, requested URL, timestamp) briefly, for security and operational purposes — not linked to any diagram content, and not used to build a profile of you. [Confirm exact log retention once the hosting is finalised and word this precisely rather than generically.]

3. The Mac app

The Mac app is a local, document-based application. It reads and writes .rout files on your own Mac and doesn't send any data to us — no analytics, no crash reporting beyond whatever Apple's own App Store platform provides by default, no network calls to our infrastructure at all.

4. Where data is processed

Roughout's web infrastructure is hosted in Germany, within the EU — part of a deliberate choice to keep this project's hosting (and the data that briefly passes through it) inside the EU rather than on infrastructure subject to non-EU jurisdiction.

5. Your rights

Since we don't retain any personal data or diagram content from your use of the web app, there's generally nothing on our side to access, correct, or erase. If you believe that's not the case — for instance, if you think something ended up in a server log that shouldn't have — contact us using the details below and we'll look into it. If you're in the UK or EU, you also have the right to complain to your local data protection authority (the ICO, if you're in the UK).

6. Children's privacy

Roughout isn't directed at children, and we don't knowingly collect personal data from anyone under 13 [confirm the right age threshold for your jurisdictions — 13 is the common US/COPPA baseline, the UK/EU figure can be 13-16 depending on the country].

7. Changes to this policy

If we make material changes to this policy, we'll update the "last updated" date above. Significant changes — like starting to use analytics or introducing accounts — would be called out clearly, not buried in a routine update.

8. Contact

Questions about this policy, or about your data? Reach us at privacy@roughout.co.uk [placeholder address — set up before launch].