Privacy policy

When you visit. Like every website, our servers and our network provider (Cloudflare) receive your IP address, browser type and the page you ask for. We use this to deliver the site, keep it secure and stop abuse. For rate limits on forms we keep only a one-way, salted hash of the IP address that changes every day.

Searches. We count the words people search for, to improve results and add missing icons. These counts are not linked to you.

An account, if you make one. Your email address, an optional name, a password stored only as a bcrypt hash, the dates you signed up, verified your email and last logged in, and your login sessions. If you share icons, also your public handle. If you sign in with Google, Google tells us your email address, your name and an account number that identifies you at Google; we keep the email, the name (which you can change) and that number, and nothing else from your Google account.

What you save to your account. Saved designs of any maker with their preview pictures, favourite icons, and icon sets you send for publishing (with the author name, link, description and cover picture you give).

The document converter. Word, Excel and PowerPoint files you convert are sent to our server, converted and deleted straight away. We do not read them, keep them or copy them. Merging, splitting and turning PDF pages, PDF to pictures and PDF to text happen in your browser and send nothing.

Links you share. "Share a link" in an editor stores a copy of that design on our server, so that the person you send the link to can open it. Anyone who has the link can see the copy.

Forms. Icon requests (the search words and an optional note) and problem reports (the message, the page, and a contact address only if you give one).

Map search in the diagram maker. The place you search for is sent from our server to OpenStreetMap's Nominatim service; your IP address is not passed on. Map tiles are fetched the same way.

We use personal data only to:

• run your account and the features you ask for, such as saving designs and publishing shared icon sets (to perform our agreement with you);
• send the emails the service needs: email confirmation, password reset and decisions on icon sets you shared;
• keep the site secure, prevent spam and abuse, and fix errors (our legitimate interest in a safe, working service);
• measure use of the site with analytics that set cookies, only with your consent;
• meet legal obligations, for example to answer a valid request from an authority.

We do not use your data for automated decisions that affect you, and we do not build advertising profiles.

We share data only with providers that help us run the site, under agreements that limit them to that work:

• Cloudflare, for content delivery, security and privacy-friendly visit statistics that set no cookies;
• an email delivery provider, to send account and notification emails;
• Google, only if you choose to sign in with Google: Google then knows you signed in to Drawico, under Google's own privacy policy;
• Google Analytics, only if analytics are switched on and you have agreed to them.

Icon sets you publish are public, with the author name and link you choose. We may disclose data when the law requires it or to protect the rights and safety of our users and the site. Some providers may process data outside your country; where the law requires it, we rely on safeguards such as standard contractual clauses.

Depending on where you live (for example under the EU and UK GDPR or the Law of the Republic of Azerbaijan on Personal Data), you can ask us to give you a copy of your data, correct it, delete it, limit or object to how we use it, or move it to another service. Where we rely on consent you can withdraw it at any time, which does not affect what happened before.

You can change your name and password and delete your account yourself on the account page. For anything else, contact us through the report form. We answer within one month. You can also complain to your local data protection authority.