1. Who We Are

MermanDraw ("we", "our", "the service") is a free online Mermaid diagram editor operated by an individual developer based in South Korea. You can reach us at mermandraw@gmail.com.

2. Data We Collect

MermanDraw is designed to minimize data collection. We do not require accounts, and we do not collect names or email addresses during normal use.

IP Address (rate limiting)

When you use the share or export features, your IP address is temporarily stored in Cloudflare KV to enforce usage limits (20 shares / 30 exports per IP per day). This data expires automatically after 24 hours and is never linked to your diagram content.

Diagram Content (when sharing)

When you create a share link, your Mermaid code and its rendered SVG are stored in Cloudflare D1 (database) and R2 (object storage). This content is public — anyone with the link can view it. Diagrams are automatically deleted 180 days after their last view.

View Count

Each time a shared diagram is viewed, an anonymous view counter is incremented. No visitor identity is recorded.

3. Data We Do Not Collect

Names, email addresses, or account credentials
Browsing history or cross-site tracking
Diagram code typed in the editor (only stored when you click "Share")

Cookies: MermanDraw itself sets no cookies. However, third-party services embedded in the page (Google Fonts, jsDelivr, Cloudflare) may set their own cookies or store data as part of their CDN and security operations. Please refer to each service's privacy policy linked in Section 4.

4. Third-Party Services

The following third-party services are loaded as part of MermanDraw. Each has its own privacy policy.

Google Fonts

Fonts are loaded from Google's CDN. Google may log your IP address as part of the font request. See Google's Privacy Policy.

jsDelivr CDN

Share pages load Mermaid.js from jsDelivr. jsDelivr may log access requests. See jsDelivr's Privacy Policy.

Cloudflare

MermanDraw is hosted on Cloudflare Pages. Cloudflare may process request metadata (including IP addresses) as part of its CDN and security services. Data is stored in the United States. See Cloudflare's Privacy Policy.

Ko-fi / PayPal

The "Buy me a coffee" link leads to Ko-fi, which uses PayPal for payments. If you choose to donate, Ko-fi and PayPal process your payment data independently. See Ko-fi's Privacy Policy.

5. Data Retention

IP-based rate limit counters: deleted automatically after 24 hours
Shared diagrams: deleted automatically 180 days after the last view
If a diagram continues to be viewed, it remains alive indefinitely

6. Your Rights

Depending on your location, you may have the following rights:

GDPR (EU/EEA): Right to access, rectification, erasure, and data portability
CCPA (California): Right to know, delete, and opt out of sale (we do not sell data)
PIPA (South Korea): Right to access, correction, deletion, and suspension of processing

To exercise any of these rights, or to request deletion of a specific shared diagram, contact us at mermandraw@gmail.com with the share link URL.

7. International Data Transfers

Diagram data is stored on Cloudflare infrastructure located in the United States. By using the share feature, you consent to this transfer. We rely on Cloudflare's standard contractual clauses for transfers from the EU/EEA.

8. Children's Privacy

MermanDraw is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this privacy policy? Email us at mermandraw@gmail.com.