Privacy policy
Last updated 15 October 2026
Summary:
- Your diagrams remain in your browser unless you save, export or share them, or use Generate.
- We hold only the data needed to provide your account: your name and email address, the graphs you save or export, your Generate requests and ratings, and the status of your Pro subscription.
- Cruxplot shows ads served by Google AdSense, which uses cookies. We count page views ourselves, without cookies and without storing IP addresses. We do not sell personal data.
1. Data controller
Cruxplot is an independent service operated from India. The operator of Cruxplot is responsible for the personal data described in this policy. Questions and requests should be sent to contact@cruxplot.xyz.
2. Data stored on your device
Diagrams are drawn in your browser, and your style kits and settings are kept in your browser's local storage. Clearing your browser's site data removes them. A graph is sent to our servers only when you save it, export it, copy its share link, or create it with Generate (see below).
3. Data we collect
| When | What | Purpose |
|---|---|---|
| You open a page of Cruxplot | The page, the website you came from (its address only, such as google.com), whether you use a phone, tablet or computer, and your country where our host provides it. To count each visitor once a day, your IP address and browser are combined with a random value that is replaced every day into a code that cannot be turned back into them; your IP address itself is not stored. No cookie is set. | To count visits and see which pages are used. |
| You create an account | Your name, email address and password (stored only as a secure hash). If you sign in with Google, the name, email address and profile picture that Google provides. | To authenticate you, verify your email address and allow password resets. |
| You save, export or share a graph | The graph (its curves, points, labels and settings), a title derived from its axes, the date it was saved and the formats in which it was exported. | To let you reopen the graph from Your graphs on any device and share it by link. |
| You use Generate | Your description, the resulting graph (or the reason none was produced) and any rating you give. | To evaluate and improve Generate. |
| You subscribe to Pro | Your PayPal or Razorpay subscription ID, plan, status and paid-up dates, and the amount, fee and date of each payment and refund. Payments are processed by PayPal or Razorpay; we do not receive your card, UPI or bank details. | To activate and deactivate Pro, and for accounting and tax purposes. |
| You contact us by email | Your message and email address. | To respond to you. |
We use this data solely to operate and improve Cruxplot. We do not send marketing emails, and we do not sell or rent personal data to third parties.
4. Share links
Each saved graph has a share link. Anyone with the link can view that graph, but not your other graphs, your name or your email address. Deleting a graph from Your graphs disables its link.
5. Service providers
| Provider | Role |
|---|---|
| Supabase | Stores accounts, saved graphs, Generate records, Pro status and payment records, and page-view counts, and provides authentication. |
| PayPal | Processes Pro payments in US dollars and donations, under PayPal's own privacy policy. |
| Razorpay | Processes Pro payments in rupees (UPI, cards, net banking), under Razorpay's own privacy policy. |
| Provides "Continue with Google" sign-in, if you choose to use it. | |
| Google AdSense | Serves the ads shown on Cruxplot, and receives your IP address, browser details and the pages you visit (see section 6). |
| Resend | Sends account emails, such as confirmations and password resets. |
| GitHub Pages | Hosts the website and, like any web host, receives your IP address when you visit. |
| jsDelivr, Google Fonts | Serve the site's code libraries and fonts, and receive your IP address when your browser loads them. |
| Desmos | Contacted only when you import a Desmos graph link. |
| Ko-fi | Used only if you choose to donate through it, under Ko-fi's own privacy policy. |
Some of these providers store data outside India.
6. Cookies and local storage
Cruxplot shows ads served by Google AdSense. Google and its partners use cookies and similar technologies to serve these ads, including ads based on your previous visits to Cruxplot and other websites, and to measure their performance. You can turn off personalised ads in Google's ad settings, and you can read how Google uses this data at policies.google.com. You can also block or delete cookies in your browser's settings.
Cruxplot itself does not set advertising or analytics cookies. When you sign in, your session is kept in local storage so that you remain signed in. PayPal, Razorpay and Google may set their own cookies when you use their payment or sign-in windows.
7. Retention
- Account data and Generate records: until your account is deleted.
- Saved graphs: until you delete them or your account is deleted.
- Page-view counts: 13 months.
- Payment records: for as long as Indian tax and accounting law requires, including after account deletion.
- Email correspondence: for as long as needed to resolve your request.
8. Your rights
You may request access to, correction of, or deletion of the personal data we hold about you, and you may withdraw your consent by deleting your account. These rights include those under India's Digital Personal Data Protection Act, 2023. To exercise them, email contact@cruxplot.xyz from your account's email address; we will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India.
9. Children
Cruxplot is an educational tool and is used by school students. Users under 18 should obtain the consent of a parent or guardian before creating an account or subscribing to Pro.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the date above and notify account holders by email of any material change.