Privacy Policy

Sponsorship inquiries

If you contact us about sponsorship, we store your name, email, organization, website, stated interests, optional budget and timing, inquiry message, consent, and received date. These records are private and used to evaluate and respond to your request, not to enroll you in the newsletter or alter tool rankings. We retain inquiry correspondence for handling the request and related business records; no automatic deletion schedule is configured. Contact privacy@diagramming.org to request access, correction, or deletion.

Information you provide

Newsletter signups include your email address, the consent recorded with your request, subscription status, and relevant signup, confirmation, unsubscribe, and delivery timestamps or outcomes. Tool suggestions include the public tool information and supporting links you submit, your submission consent, and our review decisions. Suggestions do not require your name or email address. Approved tool details may be published in the directory.

Directory activity and popularity

We count interactions such as opening tool details, following website, documentation, evidence, or repository links, comparing tools, and adding or removing watchlist entries. We use daily totals by tool and action to understand directory activity and calculate popularity and trending scores. These scores indicate recorded interest, not product quality or unique visitors.

To reduce automated traffic, duplicate events, and abuse, the tracking service uses short-lived signed session tokens, random event identifiers, and temporary identifiers derived from network addresses. These mechanisms are not a guarantee that all automated or repeated activity is excluded. Individual interaction receipts expire after approximately one day, and tracking rate-limit records after approximately two minutes; database cleanup may occur later. Daily aggregate counts have no automatic expiry configured and may be retained for historical charts. The aggregate counter records contain the tool, action, date, and count rather than an individual browsing history.

Cookies and browser storage

Your watchlist and preferred directory view are saved in your browser’s local storage. They remain there until you clear the site’s browser data or change them. The watchlist is not an account-synchronized record. Interactions with watchlist controls may still contribute to aggregate activity statistics.

Authorized reviewers receive a secure login cookie that expires after 12 hours. Public visitors do not need a reviewer account. Security services may also use browser information and storage according to their own documentation. Clearing browser storage removes saved preferences but does not delete records already held by the site.

Service providers

We use AWS hosting and MongoDB for website operation and storage, Cloudflare and Turnstile for traffic and abuse protection, and Postmark for subscription-related email delivery. These services may process information needed to provide their functions, including email delivery information or technical request information. The website’s Postmark integration disables email-open and link tracking for the transactional messages it sends.

Read Cloudflare’s Privacy Policy, the Turnstile Privacy Addendum, and Postmark’s Privacy Policy. Hosting and security services can maintain technical logs under their own settings and retention practices. Providers may process information outside your country.

Newsletter choices and retention

Newsletter registration requires confirmation before the address becomes a confirmed subscriber. You can unsubscribe through the unsubscribe link provided in subscription emails. Unsubscribing changes your subscription status; it does not automatically erase the subscriber record. We retain subscription, consent, delivery, and suppression information for operating the service and honoring unsubscribe requests. Subscriber and suggestion records currently do not have a fixed automatic deletion schedule.

External links and public information

Tool websites, repositories, and evidence links lead to independent services with their own privacy practices. Public listings, tool suggestions that have been approved, and aggregate activity scores may be visible to other visitors. Do not submit secrets or private personal information as tool descriptions or evidence.

Privacy questions and requests

Contact privacy@diagramming.org with questions or requests to access, correct, or delete information associated with you. Include enough information to identify the relevant subscription or submission; do not send passwords or sensitive identity documents. We may need to verify a request. Applicable rights, exceptions, and response requirements depend on your jurisdiction. Aggregate records that are not linked to an identifiable person may not be attributable to an individual request.

Changes to this policy

We update this page when our practices change and revise the date above. Any required notices or choices for material changes will be provided as applicable.