Graphiti privacy policy
Graphiti (www.korovatron.co.uk/graphiti) is a free online graphing calculator and function plotter by Korovatron (Neil Kendall). It works fully without an account. Signing in with Google is optional and is used only for cloud saves, so you can open your graphs on another device. This policy explains what data Graphiti collects, why, how it is used, who it is shared with, how it is protected, how long it is kept and how you can have it deleted.
1. Who is responsible for your data
The data controller is Korovatron (Neil Kendall). For any privacy question or request, email [email protected].
2. Summary of the data Graphiti handles
- Without signing in: your graphs and settings stay on your own device. Graphiti collects no personal data about you beyond anonymous visit counts.
- With Google sign-in: your Google account ID, email address, name and profile picture link, plus the graphs you choose to save to your account.
3. Using Graphiti without signing in
- Your functions, graph settings and preferences are stored only in your browser on your device (local storage). They are not sent to us.
- Share links and QR codes contain your graph inside the part of the web address after the
#. Browsers do not send that part to the server, so we do not receive it. Anyone you give the link to can open the graph. - We use privacy-focused, cookie-free aggregate analytics (GoatCounter and Cloudflare Web Analytics) to count visits and understand overall usage. These do not identify individual users and are not used for advertising or profiling.
- Our hosting and security provider (Cloudflare) processes standard technical request information, such as IP address and browser type, to deliver and protect the site.
4. Signing in with Google for cloud saves
4.1 Google user data Graphiti accesses
- Graphiti uses Google Sign-In (through Firebase Authentication) with only the basic sign-in scopes:
openid,emailandprofile. It does not request access to your Gmail, Google Drive, Contacts, Calendar or any other Google service. - Through those scopes Graphiti receives your Google account ID, email address, display name and profile picture link. Google handles your password, and we never see it.
4.2 Data we store
- Your Google account ID, email address, name and profile picture link, held by Firebase Authentication so that you stay signed in.
- The graphs you choose to save: the name you give each one, its mode (Cartesian or polar), its functions and view settings, and when it was last saved. You can save up to 100 graphs.
- A few small items in your browser's local storage so the app can remember that you are signed in and which cloud graph you last saved or opened. Signing out clears the link to your saved graphs.
4.3 How we use it
- Only to sign you in and to save, list, open, rename and delete your own graphs.
- Your email address and name are used only to identify your account and to show you that you are signed in. We do not send you emails or marketing.
- We do not sell your data, use it for advertising, profile you, or use Firebase or Google Analytics to track you.
4.4 Who it is shared with
- Only Google, acting as our processor, through Firebase Authentication and Cloud Firestore, which store your account details and saved graphs. We do not share your data with any other third party.
- Google may process data in the UK, the EU or other countries under its own safeguards and terms.
4.5 Google API Services User Data Policy
Graphiti's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising. We do not transfer it to others except as needed to provide cloud saves or to comply with the law. No humans read it except where you ask us for support, where needed for security, or where the law requires.
5. How your data is protected
- Data is sent over encrypted connections (HTTPS) and stored by Google Firebase.
- Access rules ensure each account can only read and change its own saved graphs.
- On a shared or school computer, please use Sign out in the Cloud dialog when you finish.
6. How long we keep data and how to delete it
- Saved graphs stay in your account until you delete them using the bin icon in the Cloud dialog. Deleting a graph removes it from our database.
- Your account details are kept for as long as you keep using cloud saves.
- To have your account and everything stored with it deleted, email [email protected] from the address you signed in with, and we will delete it within 30 days.
- You can stop Graphiti accessing your Google account at any time at myaccount.google.com/connections.
- Analytics and hosting data are kept only as long as needed for the purposes above, under the providers' own retention settings.
7. Legal basis (UK GDPR)
- Cloud saves: we process your account details and saved graphs to provide the service you ask for when you sign in.
- Anonymous analytics and site security: legitimate interests in understanding usage and keeping the site reliable and secure.
8. Your rights
You can ask to access, correct, delete, restrict or object to our use of your personal data, and where applicable to receive a copy of it. Email [email protected] to make a request. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
9. Changes to this policy
If we change how Graphiti handles data, we will update this page and its effective date.