Privacy
Last updated: August 19, 2026
Niblo works without advertising trackers. This page explains what is stored, where it is stored, why it is needed, and how you stay in control.
In brief
- Without an account, nothing leaves your browser.
- No trackers, audience analytics, or advertising.
- No cookie banner. The storage we use is strictly necessary for the service.
- With an account, only your email address and projects are stored in the European Union.
- You can delete everything at any time.
What stays in your browser
When you are signed out, Niblo does not send any personal data. Your projects are saved in your browser's local storage, along with the getting-started guide, sync status, and custom brushes.
This storage is used only to restore your work. Nobody else reads it, and it disappears if you clear the site's data in your browser.
What is stored when you create an account
- Your email address: to send your sign-in link and identify your account. There is no password.
- An account identifier: generated automatically.
- Your projects: the name, date, and content of each page you compose.
- Creation and sign-in dates: required to operate the service.
This data is hosted by Supabase, Inc. in European Union (Frankfurt, Germany). This information is not transferred outside the European Union. The processor's privacy policy is https://supabase.com/privacy.
Serving the site also requires technical processing. Cloudflare, Inc., our hosting provider, processes connection data, including your IP address, for this purpose only. It is based in the United States and operates a global network, so this data may be processed outside the European Union. Your account and projects remain in the European Union. The hosting provider's privacy policy is https://www.cloudflare.com/privacypolicy/.
Legal basis and purposes
Processing is necessary to provide the service you request. Your email address lets you sign in, and storing your projects lets you retrieve them on another device.
Your data is never sold, rented, or shared with third parties for advertising. It is not used to train a model.
Retention periods
- Account and synced projects: kept while the account exists. Deleting the account deletes its projects.
- Local projects: kept in your browser until you delete them or clear the site's data.
- Technical server logs: kept for up to twelve months for security and diagnostics.
Importing a page
When you import a page from an address, our server retrieves it to work around browser restrictions, then sends it back to you. The requested address passes through our servers but is not retained after your request has been processed.
Active elements in the imported page, including scripts, frames, and interactions, are removed before it is displayed.
Cookies and audience analytics
Niblo uses no advertising cookies, audience analytics tools, or social media buttons. Fonts are served from our own domain, so displaying the site makes no third-party request.
The local storage described above is strictly necessary for the service you request, so it does not require prior consent. This is why we do not display a banner.
Your rights
You have the right to access, correct, erase, transfer, restrict, and object to the processing of your data.
You can exercise these rights directly from the Settings page:
- Get a copy: download a reusable file containing all your projects and preferences.
- Clear data from this browser: delete local projects, preferences, and brushes.
- Clear your account: delete synced projects without closing the account.
- Delete your account: permanently erase the account and everything associated with it.
You can also export your projects from the editor at any time. For any other request, email contact@ysamihal.com.
If you are not satisfied with our response, you may contact the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, 75007 Paris. Visit cnil.fr.
Security
Exchanges with our servers are encrypted. Access to projects is restricted at database level by a rule that prevents one account from reading or editing another account's projects.
You sign in through a one-time link sent by email. No password is stored, so none can leak.
Changes
This page may change as the service evolves. The latest update date appears at the top, and we will notify you in the application of any significant change.