PlantUML Power Editor
Deutsch
Privacy Policy
In short: This website does not process any personal data beyond what is needed to deliver its web resources. There are no cookies, no tracking, no analytics, no ads, no sign-up and no embedded third-party content. Your diagrams never leave your browser. A third-party server is only contacted if you add external content to a diagram yourself (section 5).
1. Controller
Manuel Seiche (mseiche.de)
Address and contact: see the legal notice
Bugs and requests are welcome via
the project's GitHub issues
2. Delivering the website (hosting)
When you open the website, your browser necessarily sends data to the web server so that it can deliver the requested files (HTML, JavaScript, stylesheets, fonts, images): IP address, date and time, requested file, amount of data transferred, referrer and browser identifier (user agent).
This data is used solely to deliver the website and to keep it running reliably and securely. It is not analysed, not combined with other data and not used for profiling or advertising. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is providing the website.
All of the application's resources, including fonts and icons, are served from this server. The application does not load anything from external servers (e.g. Google Fonts or CDNs) on its own. The only exception is content you add to a diagram yourself (section 5).
3. Processing of your diagrams
The editor runs entirely in your browser. PlantUML is executed locally as JavaScript/WebAssembly; source code and rendered diagrams are never sent to a server. Exports (PNG, SVG, .puml) and copying to the clipboard happen locally as well.
This also applies to share links you create yourself ("Copy share link"). Such a link contains the name and source of the diagram in compressed form in the fragment of the address (the part after "#"). Browsers do not send this part to the web server; it is only evaluated locally in the browser. Anyone who knows the link can read the diagram, so do not share confidential content by link.
4. Storage in your browser (local storage)
To keep your work, the app stores the following in your browser's local storage: saved diagrams including thumbnails, the current draft, custom themes and settings (e.g. language, color scheme, layout). This data stays on your device, is never transmitted and cannot be seen by the operator.
This storage is strictly necessary for the functionality you request (Section 25(2) no. 2 TDDDG). You can delete the data at any time, individually in the app or entirely via your browser settings ("clear site data"). No cookies are set.
5. External content you add yourself
Your browser connects to a third-party server only if you add external content to a diagram yourself. Without such references, no requests are made. There are two cases:
a) PlantUML standard library (!include <…>, e.g. for C4,
AWS or Azure building blocks): the library is not served by this server. Instead, your
browser loads the required package from plantuml.github.io, a service of
GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. GitHub thereby
necessarily receives your IP address and the data listed in section 2 and may process it in
the USA. The request is made solely because you included the library in your diagram
(Art. 6(1)(f) GDPR: providing the functionality you asked for). See
GitHub's privacy statement
for details.
b) Your own URLs (e.g. !include https://… or image URLs): your
browser loads the content directly from the specified server, which thereby receives your IP
address. The respective provider is responsible for this processing.
6. External links
Links to other websites (e.g. the PlantUML documentation or GitHub) are only opened when you click them. From then on, the respective provider's privacy policy applies.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As no personal data is processed apart from the connection data mentioned above, the operator usually holds no data that could be attributed to you.