Privacy policy
Last updated 5 November 2026
- Open Poly runs in your browser. Your documents are stored on your device, not on our servers.
- There are no accounts, no ads and no tracking cookies, and we never sell or share your data.
- If you choose to sync with Google Drive, Open Poly can see only the files it creates, and your documents go directly between your browser and Google.
Your documents and settings
Documents you create, import or open, and your settings, are saved in your browser's own storage on your device. They are not sent to Open Poly. Clearing your browser's data for openpoly.dev deletes them, so export anything you want to keep (Export as JSON), or sync it with Google Drive.
Google Drive sync (optional)
Syncing is off until you choose to connect Google Drive. When you connect, Open Poly asks Google for permission to:
- know your Google account's email address, to show which account is connected; and
-
see, create and edit only the files Open Poly creates in your Drive (Google's
drive.filepermission). It cannot see anything else in your Drive.
Your documents are saved as files in an "Open Poly" folder in your Drive. They travel directly between your browser and Google; their contents, and their preview images, never pass through Open Poly's servers.
So that you don't have to sign in every time, Open Poly's server keeps:
- your Google account ID and email address, and a Google refresh token that lets your browser get short-lived access to your Drive. The token is stored encrypted;
- a record of each browser you've connected, identified by a random cookie set on openpoly.dev for this purpose only. It lasts up to 400 days, or until you disconnect.
You can stop at any time:
- Disconnect this browser (in the Google Drive dialog) deletes that browser's record.
- Remove access on all devices also revokes Open Poly's access with Google and deletes the stored token and email address. You can also remove access from your Google Account.
- Neither deletes your documents, on your device or in your Drive.
Open Poly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That information is used only to sync your documents with your Drive. It is not used for advertising, not sold, not used to train AI models, and not shared with anyone.
Reporting an issue
The 🐞 button files a report as a public issue on Open Poly's GitHub repository. A report contains what you write and its category, plus the app's version, the page address, your browser's name and version, and the time. Your current document and a screenshot are included only if you tick those boxes. To block spam, a Cloudflare Turnstile check runs when you send a report.
Analytics and hosting
openpoly.dev counts visits with Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites. The site is hosted by Cloudflare, which processes standard request information (such as IP addresses) to serve and protect it.
Children
Open Poly isn't directed at children under 13, and doesn't knowingly collect their personal information.
Changes
If this policy changes, the new version will be posted here with a new date. The full history is public in Open Poly's source repository.
Contact
Questions or requests about your data: open an issue at github.com/eitan27/open-poly/issues.