Privacy Policy

Last updated: April 11, 2026

GraphDeck is operated by Adam Broder, United Kingdom, acting as the data controller for the purposes of this policy. Registered with the UK Information Commissioner's Office, reference ICO00013746097. Contact: hello@graphdeck.co.uk.

1. Data Collection

GraphDeck is designed as an offline-first tool. Your graphs, settings, and preferences are stored locally on your device and are never transmitted to us. The only data that leaves your machine is (a) optional update checks, (b) AI requests you initiate using your own API key, and (c) for GraphDeck Pro only, the license-activation data described in Section 3.

2. Local Storage

All your data (blueprints, settings, preferences) is stored locally on your computer. GraphDeck does not have access to this data.

3. Pro License Activation

GraphDeck Pro requires a valid license key. To enforce the 3-machine limit described in our Terms of Service, the Software sends the following to our activation server when you activate or validate a Pro license:

• Your license key.
• A hashed, non-reversible identifier derived from basic properties of your device. The raw properties never leave your machine — only the hash is transmitted.

Purpose. This is used solely to enforce your license terms and prevent unauthorised key sharing. It is not used for analytics, advertising, profiling, or any form of user tracking.

Legal basis (GDPR). We process this data under legitimate interest (Art. 6(1)(f)) — specifically, licence enforcement and fraud prevention. No separate consent is required for this purpose.

Where it is stored. On our activation server, alongside your license key and an activation timestamp. It is not shared with any third party.

Retention. Stored while your Pro license is active. Deleted when you clear your active machines via Settings → Deactivate All Machines, when the license ends (e.g. refund or revocation), or on request via email.

Your rights. Under UK/EU GDPR you have the right of access, rectification, erasure, restriction, and objection. To exercise any of these, email hello@graphdeck.co.uk with your license key. You can self-serve erasure at any time via Deactivate All Machines.

Scope. This section applies only to GraphDeck Pro. The Free edition does not require activation and sends no license data.

4. AI Features

If you use the optional AI generation features, prompts are sent directly to the AI provider you configure (such as Anthropic or OpenAI) using your own API key. GraphDeck does not intercept, store, or log these communications.

5. Analytics and Tracking

GraphDeck does not use any analytics, telemetry, tracking pixels, or similar technologies. The Pro license-activation calls described in Section 3 are not used for tracking or profiling.

6. Third-Party Services

GraphDeck does not share your data with any third parties for marketing, advertising, or profiling. Payment processing for Pro purchases is handled by Paddle, who acts as the merchant of record and has its own privacy policy.

7. Updates

The Software may check for updates via a secure connection. No personal data is transmitted during this process.

8. Contact

For questions about this privacy policy, or to exercise any of your rights under GDPR, email hello@graphdeck.co.uk or visit graphdeck.app.