Privacy Policy

Last updated 3 September 2026

sql2erd collects nothing. No accounts, no cookies, no analytics, no logs of your data. Your SQL schema is parsed inside your own browser and is never sent to us — or to anyone else.

Why this is a technical fact, not a promise

Most ER-diagram tools require you to upload your schema to their servers. sql2erd does not, because it has no server to upload to: the parser is a WebAssembly module that runs in your browser tab, and the site is a set of static files.

This is enforced rather than merely stated. Every response from this site carries a Content-Security-Policy header containing connect-src 'self', which instructs your browser to block any network request from this page to any other origin. Even if the code tried to send your schema somewhere, your browser would refuse. You can verify this yourself in your browser's developer tools, under Network and Response Headers.

What happens to the SQL you paste

It stays in the page's memory for as long as the tab is open.
It is not written to cookies, localStorage, or any other persistent storage.
It is discarded when you close or reload the tab.
Diagrams you export as SVG or PNG are generated in your browser and saved directly by it.

What the hosting provider sees

The site's files are served by Cloudflare. Like any web host, Cloudflare processes the technical data inherent to delivering a page — your IP address, the requested file, your user agent — to route the request and protect against abuse. We do not add analytics on top of this, do not receive per-visitor reports, and cannot associate any request with the SQL you paste, because that SQL never reaches the network.

Third parties

There are none. No advertising, no trackers, no embedded fonts or scripts from other domains, no sharing or selling of data — there is no data to share.

Children

The service is a developer tool and is not directed at children. Since nothing is collected from anyone, no information about children is collected either.

Changes

If this policy changes, the date at the top changes with it. A change that ever introduced data collection would be stated plainly here, not buried.

Contact

Questions about this policy: [email protected]