Transparent & Secure Architecture

Privacy & Data Policy

Application Name: heyGrafiker (heygrafiker.com) • Last updated: September 20, 2026 • Effective Date: September 20, 2026

1. Zero-Database & Client-Side Architecture

heyGrafiker treats user privacy and data sovereignty as an absolute priority. Unlike traditional cloud design suites, our system does not maintain a central backend database that collects your designs, uploaded files, or personal information.

                        Core Principle: All canvas layers, uploaded graphics, typography, and project compositions are processed exclusively within your browser's local memory / Local Storage or directly synced with your personal Google Drive account. None of your design data is stored or harvested on our servers.
                    

2. Google Identity & Google Drive Integration

When signing in with Google or connecting Google Drive, only the following strictly scoped permissions are utilized:

Basic Authentication (Identity): Your Google profile information (name, email address, profile picture) is accessed in-browser solely to display your active user session. This data is never written to or collected in an external database.
Google Drive Storage (Workspace Access): Google Drive integration interacts exclusively with the user-designated /heyGrafiker workspace directory. Other personal files, folders, documents, or photos on your Google Drive remain completely private, untouched, and inaccessible.

Google API Services User Data Policy Compliance

heyGrafiker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not transfer Google user data to third parties.
We do not use Google user data for serving advertisements, retargeting, or personalized marketing.
We do not use Google user data to train generalized AI or machine learning models.
Human access to user data is not permitted, as the app operates on client-side browser execution.

3. Cookies and Local Storage

We do not use third-party tracking cookies, behavioral tracking scripts, or advertising profiling technologies. Data retained in your browser is strictly limited to:

Session & Preferences: Your active language selection, theme preferences, and authorized OAuth session tokens.
Local Drafts: Temporary JSON design states saved in your browser's localStorage to protect your progress against accidental tab closure.

4. Third-Party Data Sharing

heyGrafiker operates on an independent, privacy-first model. User data is never sold, leased, rented, or distributed to advertisers, third parties, or data brokers under any circumstances.

5. User Data Deletion and Access Revocation

Purging Local Data: Clearing your browser's site data and cookies instantly deletes all locally stored drafts and session data from your device.
Revoking Google Access: You can revoke heyGrafiker's Google Drive and OAuth permissions at any time directly through Google Account Security & Permissions. Once revoked, the application can no longer interact with your Google account.
Data Deletion Requests: Because we do not retain user files on central servers, deleting files from your local browser or your personal Google Drive /heyGrafiker folder permanently eliminates the data. For any questions, contact our support email.

6. Developer & Support Contact

Application: heyGrafiker (heygrafiker.com)
Developer: Tayfun Toprakçıoğlu
User Support Email: typhoonweb2010@gmail.com
Website: tayfuntoprakcioglu.com
LinkedIn: linkedin.com/in/tayfuntoprakcioglu
GitHub: github.com/tayfuntoprakcioglu