Cookie Notice
Effective date: September 15, 2026
This notice explains the cookies and similar technologies used on the diagrams.so website, operated by RedHold LLC ("Diagrams.so", "we"). It supplements the Privacy Policy. Vendor details and locations are on the Subprocessor List.
1. Essential cookies (always on)
These are required for the site to work and cannot be switched off in our banner.
| Set by | Purpose |
|---|---|
| PropelAuth (our sign-in provider) | Authentication and session cookies that keep you signed in, including Google, Microsoft, and GitHub single sign-on |
| Stripe | Checkout and billing-portal integrity and fraud prevention. Stripe sets these on its own hosted payment pages, not on diagrams.so |
| Google reCAPTCHA | Protects sign-in, sign-up, and magic-link requests from automated abuse. Loads for signed-out visitors as a security control |
| Diagrams.so (first party) | diagramz-theme, which remembers your light or dark theme choice for about a year |
2. Analytics (only with your consent)
With your consent, given or refused in the cookie banner, we load:
| Tool | What it does |
|---|---|
| Google Analytics | Page and event analytics, including campaign parameters and purchase events, so we can understand what works. When you are signed in, a pseudonymous account identifier is used; your email is never sent |
| Microsoft Clarity | Session recordings and heatmaps showing how visitors use pages |
If you decline, these tools do not load. You can change your choice at any time through the cookie settings link in the site footer.
Two related tools run on our servers rather than in your browser, so they set no cookies: PostHog (product analytics) and Sentry (error monitoring). They are described in the Privacy Policy and the Subprocessor List.
3. Local storage
We use your browser's local storage to remember your cookie banner choice and your email preference toggles. This data stays in your browser.
4. Third-party content that is not a cookie
Typefaces are self-hosted, so your browser does not contact a fonts service. The in-browser diagram editor is the draw.io editor embedded from embed.diagrams.net (JGraph Ltd); when you view or edit a diagram, your browser sends the diagram content to that origin for rendering. Custom icon libraries load from GitHub, which receives standard request data such as your IP address.
5. Other ways to opt out
- Browser controls: block or delete cookies for this site, or use private browsing.
- Google Analytics: Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.
- Microsoft Clarity: Microsoft's choices page at choice.microsoft.com, plus standard cookie blocking.
6. No ads, no sale
We run no advertising cookies or trackers, and we do not sell personal information or share it for cross-context behavioral advertising.
7. Surfaces without cookies
The public API (api.diagrams.so), the MCP server, and the SDKs set no cookies and load no third-party analytics. They send only first-party headers identifying the client software.
8. Changes and contact
We will post updates here with a new effective date. Questions: privacy@diagrams.so.