Farsha / Privacy Policy
Privacy Policy
Last updated: 4 November 2026
Farsha is a free, open source design tool at farsha.org. It has no server or database of its own, so your designs are never sent to us. This page explains what does happen to data when you use it.
Who is responsible
Farsha is made and run by Dolytro (“we”, “us”). For questions, requests or complaints about this policy write to [email protected].
In short
- We do not collect, store or sell your designs or personal data, and we have no accounts or user database.
- Your designs stay in your browser and, if you sign in with Google, in your own Google Drive.
- We use no advertising trackers. Google Analytics is optional and is off until you press Accept.
- The website is hosted by Vercel and loads fonts and sign-in scripts from Google, which means those companies can see your IP address (details below).
What data is involved and where it goes
| Data | Where it lives | Who can see it |
|---|---|---|
Your designs (.farsha files, including images and comments inside them) | Your browser; your Google Drive if you save there; a file you download | You, and anyone you share a view link with. Not us. |
| Name, email address and profile photo from Google | Your browser only, to show who is signed in | You. Not sent to us. |
| Google sign-in token | Your browser session (about one hour) | Your browser and Google |
| Settings (theme, preferences, rulers, defaults) | Your browser (local storage) | You |
| Working copy of the open file | Your browser (IndexedDB) | You |
| Your cookie choice | Your browser (local storage, farsha-analytics-consent) | You |
| Visit statistics (only if you accept analytics) | Google Analytics | Us, through Google Analytics |
| Web server request logs (IP address, browser, page, time) | Our hosting provider, Vercel | Vercel, and us if we look at the logs |
Google sign-in and Google Drive
Signing in is optional. You sign in with your Google account and Farsha asks for one permission, drive.file. It lets Farsha see and edit only the files it creates, or that you open with it, in your own Google Drive. It cannot see your other Drive files. Your designs are saved as .farsha files in your Drive and are protected by your Google account.
Your name, email address and photo are read from Google to show who is signed in. They stay in your browser and are not sent to us. The sign-in token is kept in your browser session, expires after about one hour, and is removed when you sign out. To remove Farsha’s access completely, visit myaccount.google.com/permissions.
Farsha’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and no person at Farsha reads it.
Sharing
If you turn on “Anyone with the link can view”, Farsha adds a view-only link permission to that file in your Google Drive. Anyone who has the link can open the design, and Google can see their IP address. You can turn sharing off at any time, which removes the permission. Share links are kept out of search engines. Do not share a link to a design that holds information you want to keep private.
Browser storage
Farsha stores settings, your working copy and your cookie choice in your browser’s local storage and IndexedDB, and the Google sign-in token in session storage. This is needed for the editor to work and is not used to track you. You can clear it in your browser settings; unsaved work that exists only in your browser will then be lost, so save or download your files first.
Analytics (optional)
If the site owner has turned it on, Farsha asks once whether it may use Google Analytics 4 to count visits and see which pages are useful. It is off until you press Accept: before that no analytics script is loaded and no analytics cookie is stored. “Accept” and “Decline” are equally easy, and declining changes nothing about how Farsha works. If your browser sends Global Privacy Control or Do Not Track, Farsha does not ask and does not load analytics.
If you accept, Google Analytics sets cookies (such as _ga) and receives your page views, approximate location, browser and device type, and an identifier. IP addresses are anonymised, and Google signals and ad personalisation are switched off. Google acts as our processor under Google’s privacy policy. Your designs and the content of the editor are never sent to analytics.
You can change your choice at any time with “Cookie settings” in the footer. Withdrawing consent removes the analytics cookies from this browser. Withdrawing does not affect anything before the withdrawal. You can also block analytics with a browser setting or Google’s opt-out add-on.
Other services that see your IP address
- Vercel hosts the website and keeps ordinary request logs for security and operation, under Vercel’s privacy policy.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) delivers the fonts used on the site and in the editor. Google receives your IP address and browser details when fonts load.
- Google sign-in and Google Drive (accounts.google.com, googleapis.com) are contacted only when you sign in or save, open or share a file from Drive.
- Cloudflare provides the DNS service for farsha.org.
- GitHub and the social networks linked in the footer are separate sites with their own policies; they receive data only if you click through to them.
Why we may process this data (EEA and UK visitors)
- Consent for Google Analytics and its cookies. You can withdraw it at any time.
- Legitimate interests in running, securing and delivering the website (server logs, fonts, hosting).
- Doing what you ask when you sign in and save, open or share a file through Google Drive.
How long data is kept
Data in your browser stays until you clear it. Files in your Google Drive stay until you delete them. Google Analytics data is kept for the period set in our Google Analytics property, and server logs for the period set by Vercel. We do not keep other personal data.
International transfers
Vercel, Google and Cloudflare operate in many countries, including outside the EEA and the UK. When your data is sent to them they rely on the safeguards described in their own terms and privacy policies.
Your rights
Depending on where you live (for example under the GDPR or UK GDPR) you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to withdraw consent, and to complain to your data protection authority. Because we do not hold your designs or an account for you, most of this you can do yourself in your browser and your Google account. For anything we do hold, such as analytics data, write to [email protected] and we will reply within a month.
Children
Farsha is not directed at children under 13, or under 16 where the law of your country requires a parent’s consent. If you believe a child has given us personal data, email us and we will remove it.
Security
The site is served over HTTPS. Sign-in is handled by Google, we never see your Google password, and the app asks for the narrowest Drive permission it can. No system is perfectly secure. Report a vulnerability privately as described in SECURITY.md.
Changes to this policy
We will update this page when Farsha’s data handling changes and change the “Last updated” date above. If a change needs your consent, we will ask again. Earlier versions are in the public repository history.
Contact
[email protected] · Source code: github.com/Dolytro/farsha · Made by Dolytro.