Privacy
LAST UPDATED 2026-08-19
wireframe.zip is a tool for sketching rough wireframes and sending them to people for review. This page says exactly what it stores, why, for how long, and how to get it back or get rid of it. It describes what the software actually does — if something here does not match what you observe, that is a bug and we want to hear about it at hello@wireframe.zip.
Who runs this
wireframe.zip is operated as an independent project. For anything about your data, write to hello@wireframe.zip.
What is stored, and why
| What | Why |
|---|---|
| Your email address | It is the whole of your account. There are no passwords — signing in means we email you a code. It is also how an invitation reaches a reviewer, and how a comment gets attributed. |
| The sketches you draw | So they are there when you come back, and so a share link can show them. We do not read them, and nothing about them is used for anything but serving them to you and to people you share with. |
| Comments and review notes | They are the point of sharing. A comment records its text, when it was written, and the address of whoever wrote it. |
| A session cookie | One HttpOnly cookie so you stay signed in. It is strictly necessary — it holds no analytics and follows you nowhere. |
| Error records | When something breaks, the fault is recorded so it can be fixed. These can include the URL path that failed and the account it happened to. |
What is not stored
- No passwords, because there are none.
- No payment details. Nothing is for sale, and no card ever touches this service.
- No advertising identifiers, no third-party trackers, no data sold or shared with anyone for their own purposes. Ever — this is not a "currently" statement.
Reviewers who never signed up
You can open a share link and click through a prototype without an account, and nothing about you is stored when you do. The one exception is deliberate: we count that a link was opened, so we can tell whether emailed links are reaching people at all. That count records the event, not you.
If you leave a comment, you sign in first, and from that point your address is stored as described above — because a comment with no author is not much use to the person who has to act on it.
Analytics
We run our own copy of Umami rather than a third-party analytics service, and it is served from this domain. It sets no cookies and stores no name, address or device identifier. Its visitor count works by hashing the site, your IP address and your browser's user-agent string together with a salt that is replaced every month. The result cannot be turned back into an IP address or a person, and it stops being linkable to last month's visits when the salt rotates. Your IP address is processed to compute that hash. It is not stored.
Who else touches your data
Three companies, each doing one job:
- Cloudflare — hosting, and where the database and documents live.
- Resend — sends the email: sign-in codes, invitations, notifications.
- Railway — hosts the analytics instance described above.
None of them is permitted to use your data for their own purposes. Nobody else gets it, and it is not sold.
How long things are kept
| What | How long |
|---|---|
| Sign-in codes | 10 minutes, then they expire on their own |
| A signed-in session | 90 days, or until you sign out |
| Your sketches and comments | Until you delete them, or close your account |
| After you close your account | 30 days, so a change of mind is recoverable. Then it is purged. |
| Backups | Restore points for 90 days; database recovery for 30 days. Both exist so a mistake on our side does not cost you your work. |
Closing your account is a real closure, not a hidden flag: share links die immediately, and you are emailed a download of everything before anything goes.
What you can do about all of it
These are buttons, not a request process. You do not have to write to anyone, and you do not have to explain why.
- See what we hold — your account page lists it.
- Take it with you — one file, the whole account, including every sketch. Download it.
- Delete it — close your account and it goes, on the schedule above.
- Stop the email — every notification carries an unsubscribe link. Sign-in codes and invitations you asked for are not marketing and are not covered by it.
- Object, or ask us to correct something — write to hello@wireframe.zip.
These rights are offered to everyone who uses wireframe.zip, wherever you live, rather than only where the law compels them.
Children
This is a tool for professional work and is not intended for children under 13. We do not knowingly collect anything from them.
Changes
If this policy changes in a way that matters, the date at the top changes and account holders are told by email before it takes effect. We will not quietly broaden what we do with data you have already given us.