Privacy Policy

Everything you type in Draftpad is saved to your browser's local storage. It is never sent to a server, because Draftpad doesn't have one — there's no account system and nothing to sync. Clearing your browser data or using private browsing removes it, so export anything you want to keep.

That covers Draftpad itself. The analytics tools below run in the same page and are described separately, because what they record is a different question from where your drafts are stored.

Nothing below loads until you accept it. Neither tool is merely switched off before you choose — its script is never placed on the page at all, so there is nothing present that could set a cookie. A notice asks the first time you visit, and declining or ignoring it means no analytics cookie is ever set. Both also run only on draftpad.app; local and preview builds send nothing regardless of what you choose.

Google Analytics shows which pages are visited and roughly how. It is configured with IP anonymization and without Google Signals or ad personalization. If you accept, it sets _ga and _ga_<id>.

Microsoft Clarity records sessions and generates heatmaps so we can see where the interface is confusing. A session recording is a replay of the page as it was rendered in your browser — clicks, scrolling, and the pages you visit — sent to Microsoft. If you accept, it sets _clck and _clsk.

You can change your mind at any time with Cookie settings, in the footer of every page and in the app's settings panel. Declining after accepting expires the four cookies above and reloads the page, because unloading the scripts alone would leave them running until you next navigated.

Your answer itself is kept in one strictly necessary cookie, draftpad_consent. It records what you chose, when, and which tools you were asked about, and it is set whichever way you answer — remembering a refusal is the only way to avoid asking you again on every page. It is never used to identify or track you and is not shared with anyone. It lasts six months, after which the notice returns.

It is set by the server rather than written by a script in your browser, which is what lets it last: Safari deletes script-written storage after seven days, so a decision kept that way would be quietly forgotten and you would be asked again about once a week.

Two separate things protect what you write, and it's worth stating them separately rather than letting one stand in for the other.

Your drafts are never transmitted by Draftpad. They are saved to your browser's local storage and there is no server to send them to.

Clarity's replay is masked. A replay reconstructs the page you saw, so where a draft is stored doesn't by itself keep it out of a recording — masking is what does that. Clarity is configured with Strict masking, and the editor, the drafts list, the markdown preview and the word-frequency list additionally carry a data-clarity-mask attribute in this site's HTML, which overrides the dashboard setting. Text in those areas is replaced with placeholder characters in your browser before a recording is sent to Microsoft. That is a configuration we control and keep on deliberately; if it ever changes, this page changes with it.

Ahrefs is used to monitor this site's technical health and search performance. This works by crawling publicly available pages, the same way a search engine does — it does not run in your browser and collects nothing about you as a visitor.

The support page and the site's "Report an issue" links open your email client via a mailto: link to hello@draftpad.app. Nothing is submitted through this site — whatever you send goes directly to that inbox the same way any other email does, and stays there for as long as it's useful for handling your request.

There's nothing else to disclose: no accounts, no payment processing, no advertising, and no data ever sold or shared beyond the analytics tools named above. If that changes, this page will change with it.

Questions about this policy are welcome at hello@draftpad.app.