Privacy policy
This is a draft under review and not yet in force.
On this page
This policy explains what personal data sketch.house handles, why, and what you can do about it. The short version: we collect what we need to run the service for you, we do not sell it, we do not show you ads, and we do not train AI on your plans.
Who is responsible
The controller of your personal data is Astur Labs. For anything about your data, write to support@sketch.house.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Your email address, and the name and picture your Google account shares if you sign in with Google | To create your account, sign you in and email you about it | Contract: you asked for an account |
| Your projects: drawings, the plans you upload, furniture, project names | To store them, show them to you and, when you publish, show them to the people you share the link with | Contract |
| Sign-in sessions: when you signed in, your IP address and your browser's description | To keep you signed in, let you sign out everywhere, and spot misuse | Legitimate interest in keeping accounts secure |
| Short-lived counters keyed by IP address or by a scrambled form of your email address | To stop floods of sign-in emails and messages | Legitimate interest in preventing abuse |
| Technical logs: the page asked for, the time, errors, a request id; never your email or your plans | To find and fix faults | Legitimate interest in a working service |
| What you write to us, by email or the feedback form, with the page, app version and browser, and a project's id if you choose to include it | To answer you and fix what you report | Legitimate interest in supporting our users; contract when it is about your account |
| How the site is used, as anonymous counts without cookies (Cloudflare Web Analytics) | To learn which pages and features help | Legitimate interest in improving the site |
| With your consent only, Google Analytics | To understand how people find and use the site | Consent, which you can withdraw at any time |
Google Analytics runs only if you accept analytics in the cookie banner; see the cookie policy.
If you use sketch.house without an account, your drawing and any plan you upload stay in your browser. We do not receive them.
We do not collect your home's address, and we ask you not to put it in a project's name. We do not make decisions about you by automated means.
Who helps us run it
These companies process personal data for us, under contracts that oblige them to protect it and to use it only to provide their service.
| Company | What they do for us | What they handle |
|---|---|---|
| Cloudflare, Inc. | Host the site and the app; store accounts, projects and uploads; send our emails | Everything above that is stored or sent |
| Namecheap, Inc. | Host our support mailbox | What you write to us, by email or the feedback form, and our replies |
| Sign-in with Google, only if you choose it | Your Google account's id, email address, name and picture | |
| Google (Analytics) | Usage statistics, only with your consent | Pages visited and actions taken, an online identifier, and your approximate location from your IP address |
| Anthropic, PBC (when plan scanning is switched on) | Reading a floor plan you choose to have traced automatically | The plan image you send for scanning |
Our emails are sent with Cloudflare Email Sending. Plan scanning is part of a paid plan that does not exist yet; this policy will be updated before it is switched on. When paid plans arrive, the payment provider will be named here before any payment is taken.
The fonts on this site are served from our own domain, so loading a page does not contact Google.
If you connect your own AI app to your account, what it reads from your projects, pictures of the plan included, goes to that app's provider under your agreement with them, not under this policy. Whether they use it to train their models depends on your plan and settings with them.
Where your data goes
Cloudflare runs a global network, so your data may be processed outside the European Economic Area, including in the United States. Google, Namecheap and Anthropic are based in the United States. These transfers rely on the safeguards the GDPR provides for, such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses in each company's data processing agreement.
How long we keep it
- Your account for as long as you have it. When you delete it, we delete your projects, uploads, published links and sign-in sessions at once, and send one last email to confirm.
- Free projects for 6 months from the day you create them. We email you 30 and 7 days before, then delete them for good.
- A project you delete leaves your list at once and is deleted for good 30 days later. A project keeps its last 20 saved versions.
- Sign-in sessions for 30 days after you last used them. A sign-in link works once, for 15 minutes.
- Abuse counters for between a few minutes and a day.
- Technical logs for 7 days.
- Messages to support for as long as we need them to answer you.
- Backups: deleted data can remain in our automatic backups for up to 30 days before it is gone everywhere.
- Without an account, your projects stay in your browser until you clear the site's data. We never had them.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to limit what we do with it, to receive it in a format you can take elsewhere, and you can object to what we do on the basis of our legitimate interests. Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Write to support@sketch.house; we answer within one month.
You can delete a project, or your whole account, yourself at any time from the app.
If you think we handle your data unlawfully, you can complain to a data protection authority, such as the one where you live.
Children
sketch.house is not meant for children. You must be at least 16 years old to create an account.
Security
Connections to sketch.house are encrypted. Sign-in links are stored scrambled and work once. Tokens from Google are stored encrypted. Only the operator can reach the stored data, and only to run the service, to answer you, or when the law requires it.
Changes to this policy
Each version has a number and the date it applies from. If a change matters to you, we will email you before it applies.