Privacy Policy

Last updated 12 September 2026

This Privacy Policy explains how HomeDraft ("we," "us," or "our") collects, uses and protects information when you use HomeDraft, the browser-based house-planning tool at homedraft.house.

What we collect

• Your email address and name. Used to identify your account and sign you in. If you sign in with Google, we receive your email address, name and profile picture URL from Google — nothing else, and never your Google password.
• Your password, hashed. If you create an account with a password, it is stored only as a bcrypt hash. Nobody, including us, can read it back.
• Your house plans. The drawings, rooms, dimensions, furniture and 3D settings you create, along with the thumbnail image shown on your dashboard.
• Visit and usage events. We record landing pages, campaign source labels, navigation, signup attempts and outcomes, editor features, save and export outcomes, sampled time while a page is visible and recently used, and sanitized error categories. Random browser and visit identifiers let us understand visits before sign-in. When you sign in, we can associate that visit with your account. We do not record form values, passwords, drawing contents, raw exception messages, or full URL queries in usage events. Our private session report is restricted to the authorized site owner.
• Historical billing records. If you previously subscribed, we retain the identifiers Stripe gives us for your customer and subscription record, whether that subscription is active, past due or cancelled, the date the current billing period ends, and whether it is set to cancel. We do not store your card.
• Feedback you send through the in-app feedback button, including the star rating and any message you write.

Free service

HomeDraft is free. We do not request payment details to create an account or use the service.

What we do not collect

We do not receive your card or bank details, address book, contacts, or unrelated files from your device. Our usage tracker does not record your keystrokes, screen, drawings, or form contents. We do not sell personal information. Service providers process information as described below.

Where it is stored

Account details and house plans are stored in a PostgreSQL database hosted by Neon in the United States. The application itself runs on Render. Neon and Render act as processors on our behalf. Payment records are held by Stripe, which handles that data as an independent controller under its own privacy policy. Traffic to and from the site is encrypted with HTTPS.

Cookies

An HttpOnly authentication cookie keeps you signed in, and your sign-in token is also held in your browser's local storage. Our first-party visit tracker uses a random HttpOnly browser identifier lasting up to 90 days and a visit identifier that expires after 30 minutes of inactivity. Campaign labels and per-tab activity metadata are kept in session storage. These identifiers grant no account access.

Google measurement cookies are optional and remain disabled until you choose Accept optional cookies. Reject optional cookies leaves every feature available. Your choice is saved in this browser. You can change it at any time using Cookie settings. Rejecting optional cookies stops our subsequent Google measurement events; it does not erase information already received by Google.

Optional Google analytics and advertising measurement

With your optional-cookie consent, Google Analytics 4 measures page visits, general feature use, signup progress, active time, and sanitized errors. Google Ads records a signup conversion only when a new account is created, including Google or password signup. Returning logins are not signup conversions. Standard Google ad-click identifiers can connect a consented visit or signup to the ad that brought it here.

We do not send account names, email addresses, passwords, form values, plan contents, project names, or reset-link tokens to Google measurement. Google may receive technical data such as browser/device information and the network address used to contact its services. We disable advertising personalization and Google signals in our tag configuration. Google handles its data under the Google Privacy Policy; you can also review Google's advertising data explanation and My Ad Center.

Our first-party visit report and Google reports may differ because of cookie choices, content blockers, interrupted visits, and different session definitions.

Your choices

You can delete any project from your dashboard, which removes its data from the database. To delete your account and everything in it, email hello@homedraft.house and it will be removed. You can also ask for a copy of what is stored about you.

Children

HomeDraft is not directed at children under 13 and we do not knowingly create accounts for them.

Changes

If this policy changes materially, the date at the top of this page will change and the new version will be posted here.

Contact

Questions about privacy, or a request to delete your data: hello@homedraft.house.