Privacy

What we store, why, and who else sees it. Short, because the honest list is short.

Last updated 2026-08-09.

Using Squiggler without an account

Nothing identifies you. We keep aggregate counts — how many tracings were drawn, which rhythms are popular, how often an export happens — with no cookie, no tracking pixel and no third-party analytics.

Your IP address is what the free daily allowance is counted against, and what stops one script spending everyone else’s. To count it we store a scrambled form of the address — a one-way hash we cannot read an address back out of — together with today’s date and a number, and nothing else. Those rows are deleted after two days. The address itself is never written down: our server logs keep only the network part of it, with the last part replaced by zeroes before the line is written.

A tracing you share by link is encoded in the link itself. It is never stored on a server, so a link nobody has is a tracing nobody can find.

With an account

We store your email address, the tracings you save (as settings, never as images), the collections you make, what you are entitled to, a record of the credits you have spent, and today’s count against the free daily allowance.

We use it to run the product and to contact you about your account. We do not sell it, and we do not send marketing you did not ask for.

Who processes it

Sign-in is handled by Clerk. Payments are handled by Stripe, which is where your card details go — they never reach us. Data is stored in Postgres hosted by Neon, the API runs on Fly.io and the site on Vercel. Descriptions typed into the composer are sent to Anthropic's API to be turned into settings.

Each of these is a processor acting on our instructions, and each is bound by their own data protection terms.

How long we keep it

For as long as you have an account, and then no longer than we must. Records of payments are kept as long as accounting law requires, which in Sweden is seven years.

When an account is deleted we keep a one-way scrambled form of the email address, and a note of which one-time offers it had used. We cannot read an address back out of it and it is linked to nothing else. It exists so that free starter credits and single-use codes stay single-use, and we keep it for as long as we offer them.

Your rights

Download a copy of everything we hold about you from your account settings, whenever you like — no request, no waiting. The same panel deletes your account and everything in it, apart from the one scrambled record described under “How long we keep it”.

Anything else — a correction, an objection, a question about how we use it — is an email away and we will answer within a month.

If you think we have handled your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY).

Who you are buying from

Company

Yumed AB

Registration number

559578-4876

VAT number

SE559578487601

Email

support@squiggler.io

For education only; not for clinical use.