Privacy Policy

No account, no sign-in

Draftly does not ask you to create an account or sign in. There is no username, password or profile of any kind tied to your use of the editor.

Your documents

The document you write or upload is created and edited entirely in your browser and kept on your own device, not on any server. Where on your device depends on the Remember my documents on this device setting. On phones and tablets it's on by default: documents are saved in your browser's storage on the device (IndexedDB) until you delete them or clear your browser's data. On computers it's off by default: a document is kept only in the browser tab it's open in (session storage), and closing the tab removes it. You can change the setting at any time on the Workspace page. Either way, your documents stay on your device — nowhere else — unless you explicitly choose to use the Share feature.

PDF files you download are generated in your browser; your document isn't uploaded to make them.

When you share a document, the exported .docx file is uploaded to Cloudflare R2 (object storage), and a small record — a share ID, the file name and creation/expiry timestamps — is kept in Cloudflare KV (a key-value store) so the link can be looked up. Both the uploaded file and its record are automatically deleted 30 days after the link is created. A shared link is only reachable by anyone who has the exact URL; shared pages are marked so search engines do not index them.

Emailing a share link

If you choose to send a share link by email, the recipient's email address is sent to our transactional email provider (Resend) solely to deliver that one message. We do not add it to a mailing list, and we do not keep the address afterward. If you fill in the optional reply-to address and your name, they are also sent to Resend solely to deliver that message, and we do not keep them afterward.

To prevent automated abuse, a Cloudflare Turnstile check runs before an email is sent (see Cloudflare's Turnstile Privacy Addendum). We also keep a few simple counters — never email addresses: how many times each share link has been emailed (up to five, kept for the link's 30 days); how many emails were sent each day from your IP address and from your browser, which is identified by a random ID stored in it (each kept for 2 days); and how many documents were shared from an IP address in the past hour (kept for 1 hour).

Analytics

We use Google Analytics to understand how visitors use the site: which pages are visited, general information about your device, browser and region, interactions such as scrolling and clicks on links to other sites, and which features are used (for example, exporting or sharing a document). Google Analytics uses cookies to do this.

The documents you edit and their content are never sent to Google Analytics, and neither are document IDs: page addresses are reported without the part that identifies a document. Shared-document viewer pages don't load analytics at all. We only count that a shared document was opened or downloaded, as an anonymous total with nothing about the document or the person opening it.

You can read how Google handles this data in Google's Privacy Policy, and you can opt out of Google Analytics on every site with the Google Analytics opt-out browser add-on.

We also use Cloudflare Web Analytics, which is cookie-free: it sets no cookies, doesn't use your browser's local storage, and doesn't track you across sites or visits. It tells us which pages are visited and how quickly they load and respond, so we can keep the editor fast. Like Google Analytics, it never receives your documents or their content. See Cloudflare's Privacy Policy.

No ad tracking

Draftly does not run any advertising or ad-tracking scripts, and nothing about how you use the site is shared with advertisers.

IP addresses

When you upload a document to create a share link, our server briefly uses your IP address to apply a rate limit (a maximum number of uploads per hour), so the upload feature can't be abused. This is used only for that rate limit, is not linked to the contents of your document, and is not used to track you across visits.

What stays on your device

Preferences such as your chosen theme and words you've added to the built-in spelling dictionary are saved in your browser's own local storage. They never leave your device and are never sent to us.

No ads

Draftly does not show advertising and does not share any information with advertisers.

Changes to this policy

If this policy changes, the "Last updated" date above will change too. Material changes will be reflected here directly.

Contact

Questions about this policy or your data can be sent to [email protected].