Privacy Policy
DrakoFlow is built on a zero-knowledge, client-first architecture. Your code, diagrams, and personal data never leave your browser.
Last Updated: August 2026Zero Data Collection Commitment
DrakoFlow (including the Web Application, HTML Player, Chrome Extension, VS Code Extension, and IntelliJ Plugin) does not collect, track, store, transmit, or monetize any user data, personal information, or diagram source code. Everything executes strictly within your local machine's memory sandbox.
DrakoFlow Web Studio & HTML Player
The DrakoFlow online editor and interactive standalone HTML players run completely in-browser using standard HTML5 Canvas, SVG, and JavaScript engines:
-
No Account or Registration: You can use all features of DrakoFlow anonymously without creating an account or providing an email address.
-
Local-Only DSL Processing: Parsing, layout computation, routing, and SVG rendering happen entirely on your device's CPU/GPU. No diagram source code is sent to backend servers.
-
In-Memory Exports: Exporting to PNG, SVG, or standalone interactive HTML player files is performed locally in browser memory via native Blob/DataURL APIs.
-
Client-Side URL Sharing: When sharing diagrams via URL (#code= or ?diagram=), the diagram DSL is compressed locally in the browser hash using LZ-String. The payload is read solely by client-side JavaScript and is never sent to a database.
DrakoFlow Chrome Extension
The DrakoFlow Chrome Extension provides a silent, unobtrusive mechanism to replace markdown code blocks fenced with ```drako into live interactive diagram players:
-
Targeted DOM Inspection: The content script only reads text inside <pre> and <code> elements labeled as
drako. It never reads form inputs, credentials, session cookies, or unrelated page content. -
Isolated Sandboxed Rendering: Diagram interactive players are rendered locally within sandboxed containers or iframes without external network calls.
-
Local Settings Storage: The extension only uses Chrome's storage.local API to remember your local display preferences (such as auto-rendering toggles). No settings are transmitted over the network.
-
No Remote Code: In strict compliance with Chrome Web Store Manifest V3 guidelines, all scripts, styles, and assets are 100% bundled locally within the extension archive.
Information We Do NOT Gather
To be clear and unambiguous, DrakoFlow does not gather:
-
No Personally Identifiable Information (PII): No names, email addresses, IP trackers, or location data.
-
No Diagram Code or Data: Your architecture designs, proprietary code names, and relationships remain private to your computer.
-
No Browsing History or Page Context: The Chrome extension does not log or monitor visited URLs or search queries.
-
No Third-Party Advertising Trackers: No advertising cookies, tracking pixels, or third-party marketing beacons are used.
Web Hosting & Infrastructure
The DrakoFlow website and documentation are hosted statically on GitHub Pages (provided by GitHub, Inc.). When you load static web assets from GitHub Pages, standard web server access logs (such as your IP address and browser User-Agent) may be collected by GitHub in accordance with GitHub's Privacy Statement. DrakoFlow does not maintain any custom backend servers or external databases.
Open Source Transparency
DrakoFlow is free and open-source software licensed under the GNU General Public License v3.0 (GPL-3.0). Every line of source code for the core parser, rendering engine, web studio, and browser extension is publicly accessible and auditable on GitHub:
Contact & Questions
If you have any questions or feedback regarding this Privacy Policy or DrakoFlow's security practices, please open an issue or discussion on the official GitHub repository: