updated june 2026
Privacy policy.
cartograf is built by Exploraworks. This policy explains what data we collect, why, and how you can control it.
What we collect
No account required for OSS use.If you run cartograf locally or self-host it, we collect nothing. All data stays in your browser's localStorage.
Cloud users. When you sign in via GitHub OAuth, we store:
- Your GitHub user ID and email (from OAuth, used to identify your account)
- Project data you analyze: repository names, URLs, detected tech stack
- Your customizations: account labels, notes, tags, and layer preferences
We do not collect passwords, payment details (Stripe handles those directly), or any content from your repositories beyond the manifest files needed for tech detection.
Cloud workspace data is encrypted by the application before it is stored in our database. A plaintext, account-scoped offline copy remains in your browser's localStorage. This is server-side encryption, not end-to-end encryption.
How we use it
Your data is used solely to provide the cartograf service — syncing your maps across devices and keeping your customizations when you sign back in. We do not sell, share, or use it for advertising.
Third-party services
cartograf Cloud relies on trusted third-party infrastructure for authentication, database hosting, payments, and deployment. Each provider operates under its own privacy policy. We choose providers that offer strong data protection and do not use your data for advertising.
Repository data is fetched only from public GitHub APIs and is never stored beyond what you explicitly analyze and save to your account.
Repository data is fetched only from public GitHub APIs and is never stored beyond what you explicitly analyze and save to your account.
Data retention
Your cloud data is retained as long as your account is active. You can delete your account at any time from the app settings, which removes all associated data from our database within 30 days.
Cookies
cartograf uses only functional cookies — a session token set when you sign in to maintain your session. We do not use analytics or advertising cookies.
Your rights
You can request a copy of your data or ask us to delete it by emailing privacy@exploraworks.com. We'll respond within 30 days.
Changes to this policy
If we make material changes, we'll update the date at the top of this page. Continued use of the Cloud plan after changes constitutes acceptance.
Exploraworks · All rights reserved.