Privacy Policy
Effective as of October 13, 2026
This policy explains what untitled collects, why, who helps us run it and the rights you have. In short:
- Without an account, your boards never leave your device.
- Sign in, and we keep what the service needs: your email address, what you put on your boards, and who you share them with.
- Buy untitled Plus, and Stripe takes the payment; we keep only which Stripe customer is yours and whether your Plus is active.
- We don't sell data, show ads or use trackers, and your content isn't used to train AI.
- When you ask the frog to draw, only the words you type go to our AI provider.
- Synced boards are stored in the EU, and you can export or delete them whenever you like.
- Others see a board only if you turn on its view-only link (people you give the link to) or publish it as your page (anyone, including search engines).
- Paste a link and our server, not your device, fetches that page's title and pictures for the card.
- Ask to edit someone's board and they see your email address; let someone edit yours and they see yours.
Questions? Write to hello@ketryon.com.
1. Who we are
untitled cards (“untitled”) is a product of Ketryon AB (company reg. no. 559551-1030), Solbackavägen 13D, 632 22 Eskilstuna, Sweden, which is the controller of the personal data described here. This policy covers the website at untitled.cards, the app at untitled.cards/app and the emails that come with them. Our Terms of Service describe the rest of our agreement with you.
2. Using untitled without an account
You can use untitled without signing in. Your boards, notes, photos and settings are then stored only in your browser on your device (in its local storage and IndexedDB). We don't receive them, and we can't see, recover or delete them for you.
Clearing your browser's data for untitled deletes them. Use Export to keep a copy as a file.
3. What we collect when you sign in
Signing in syncs your boards between your devices. To do that we process:
| What | Examples |
|---|---|
| Account | Your email address, and a record of each sign-in email we send (when, and a one-way hash of the link and code, never the code itself). |
| Your boards | Board names and everything on them: notes, documents, headings, arrows and their labels, pen strokes, captions, colours and positions. On shared boards, comments and reactions, with who wrote them. |
| Your files | The photos, videos and files you add (PDFs, Word documents, spreadsheets, decks, and the slides made from a deck), with their type and size. Large photos are made smaller on your device before they're uploaded. |
| Sharing | A board's view-only link (a random code) while it's on; who has asked to edit your board or been let in, and when. Owners get an email when someone asks, with the asker's email address. |
| Your page | If you publish one: your handle, which board, a copy of it as it was when you published (everything on it, and the files it shows) and when. All of it is public, at untitled.cards/@your-handle, until you take it down. |
| Your own domain | With untitled Plus, the domain you connect to your page, the record that shows it's yours, and whether its DNS points to us yet. |
| Link cards | The address you paste. Our server fetches that page (the site sees our server, not you) and keeps its title, description, picture and icon on the card, the pictures stored like your photos. |
| Live editing | While you have a shared board open with others, your edits, pointer position and cursor-chat text pass through our live service to them, with your email address so they see who it is. None of it is kept there. |
| untitled Plus | Your Stripe customer reference, and whether your Plus is active and until when. Stripe holds your payment details, billing address and receipts; we never see your card. |
| Doodle requests | What you type when you ask the frog to draw, and how many doodles you've asked for each day. |
| Technical data | IP address, browser and request details that our hosting provider logs when your device talks to our servers, used for security and fixing problems. The country your connection comes from, which our host tells us, picks the currency prices are shown in; it isn't stored. |
We count visits with Vercel Web Analytics, which sets no cookies and doesn't identify you or follow you across sites: it records the page (with board ids and link tokens removed), where the visit came from, and the country, browser and device type. We also count a few steps in the app (signing up, sharing a board, asking to edit, starting checkout), without who did them. If you accept statistics in the cookie banner, we also use Google Analytics on untitled.cards (never on published pages), which counts visits the same way with board ids, link tokens and query strings removed — see Cookies. We don't use advertising identifiers or tracking pixels, and beyond that country we don't collect your location, contacts or anything from other apps. What you write on your boards is up to you; please don't put sensitive data about other people on them.
4. How we use it, and why we may
- To run untitled for you: sign you in, store your boards and files, and keep your devices in step. The legal basis is our agreement with you (GDPR art. 6(1)(b)).
- To publish your page when you ask us to, at untitled.cards/@your-handle and, with Plus, your own domain, and to fill in link cards. The legal basis is our agreement with you (art. 6(1)(b)).
- To keep it safe: limit how many sign-in emails an address gets, stop abuse and fix faults. The legal basis is our legitimate interest in a secure service (art. 6(1)(f)).
- To draw doodles you ask for, and to check automatically that a request is suitable before a doodle is shown. Drawing is part of our agreement with you (art. 6(1)(b)); the check is our legitimate interest in keeping untitled safe for everyone, including younger users (art. 6(1)(f)).
- To take payment for untitled Plus, through Stripe, and keep the records bookkeeping law requires. The legal bases are our agreement with you (art. 6(1)(b)) and our legal obligation (art. 6(1)(c)).
- To email you: sign-in emails you ask for, a note when someone asks to edit a board of yours, and notices about changes to untitled or these policies that affect you. We don't send marketing without your consent.
5. The frog's doodles (AI)
When you ask the frog to draw something, the words you type are sent to Anthropic's Claude AI, which draws the doodle as pen strokes and, in a separate step, checks that the request is suitable. Nothing else from your boards is sent: not your notes, documents, photos or other doodles. The finished doodle is saved on your board like any other card.
The check is automatic. If it decides a request isn't suitable (for example sexual content, violence, hate or real, named people), no doodle is shown. Anthropic processes requests on our behalf, doesn't use them to train its models, and deletes them automatically within at most 30 days, unless it needs them longer to enforce its usage policies or the law requires it.
Doodles are only available when you're signed in, with a daily allowance per account.
6. Waitlists
You can join a waitlist for something we're building (the web clipper, the CLI). We first email you a link to confirm it was you; nothing is kept on the list until you click it. Once you do, we keep your email address and which list you joined, to email you when it launches. We rely on your consent (GDPR art. 6(1)(a)), which you can withdraw any time: every email has a way to unsubscribe, or write to hello@ketryon.com.
To stop the form being used to email people who didn't ask, we record each request (the email address, the list and a scrambled form of your IP address that can't be turned back into it) and delete it after 30 days. That's our legitimate interest in preventing abuse (art. 6(1)(f)). Confirmed addresses are also kept in our email provider, Resend, to send the launch email.
8. Transfers outside the EU
Your boards and files are stored in the EU. Some providers process limited data outside the EU and EEA, for example in the United States: Resend (email addresses, for sign-in, edit-request and waitlist emails), Stripe (payment details, for untitled Plus), Vercel (IP address and request details, for hosting, and your page's own domain), Honeybadger (error reports, for fixing faults), Google (visit statistics, if you accept them), Cloudflare (live edits, pointer positions and cursor-chat text pass through its global network while a shared board is open, without being kept) and Anthropic (the words of a doodle request). When they do, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
9. How long we keep it
- Your account, boards and files: while your account exists.
- Things you delete from a board: their content is removed from our database when your device syncs. We keep only a note that they were deleted, so your other devices remove them too.
- Sign-in records: at most 30 days.
- View-only links and who may edit a board: until you turn the link off or remove them, or the board or your account is deleted. Comments: until they're deleted, with the board, or with your account.
- Your page: until you take it down or delete your account. Your own domain: until you remove it, take the page down or delete your account; we also stop using it if your Plus ends.
- untitled Plus: we keep your Stripe customer reference while your account exists. Stripe keeps payment records for as long as bookkeeping law requires (seven years in Sweden).
- Waitlists: confirmed addresses until the launch email is sent and a reasonable time after, or until you unsubscribe or ask us to delete them. Waitlist requests (for preventing abuse): at most 30 days.
- Daily doodle counts: at most 30 days. Doodle requests at Anthropic: deleted by Anthropic within at most 30 days, as described above.
- When you delete your account: your account, boards and files are deleted from our database and file storage right away, and from database backups within 30 days.
- Hosting logs: for a short time, as set by our hosting provider, unless needed longer to investigate abuse.
- Google Analytics data: up to 14 months.
10. Security
Data is encrypted in transit and at rest. Sign-in links and codes are stored only as one-way hashes, sessions are signed cookies, and photos are served through short-lived private links rather than public addresses. Access within our team is limited to those who need it to run untitled. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
11. Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data, or send it to another service;
- correct data that's wrong;
- delete your data, or limit how we use it;
- stop using it where we rely on legitimate interest;
- withdraw consent you've given, without affecting what happened before.
Write to hello@ketryon.com and we'll answer within a month. If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY) or the authority where you live.
12. Exporting and deleting your data
- To take a copy: open a board and choose Export. You get one file with the board and all its photos.
- To delete something: delete it on the board. Signed in, the deletion syncs to our servers and your other devices.
- To delete your account and everything in it: sign in, open the cloud menu at the top right and choose Delete account. You can also email hello@ketryon.com from your account's address and ask us to.
- To remove untitled from a device: sign out and clear your browser's data for untitled.
14. Children
You must be at least 13 years old to create an account. We don't knowingly collect data from children under 13; if you think we have, write to us and we'll delete it.
15. Changes to this policy
If we change this policy in a way that matters, we'll email signed-in users before the change takes effect and update the date at the top.
16. Contact
Ketryon AB (company reg. no. 559551-1030, VAT SE559551103001), Solbackavägen 13D, 632 22 Eskilstuna, Sweden. Email hello@ketryon.com.