GraphРусский

Privacy policy

Last updated: October 22, 2026

Graph (graphindex.org) is a personal knowledge graph: notes with links to materials stored anywhere. It is run by a private individual, its owner. Questions and data requests: spldlehich@gmail.com.

What we receive when you sign in with Google

Only the basic profile: email address, name, profile picture and Google account ID. We do not request access to Gmail, Drive, contacts or any other Google data. Google sign-in tokens are stored in the database and used only for signing in.

What is stored while you use the service

  • Your notes, links, tags, connections between nodes and saved graph views. For links to files on your own disk — also the computer name and system user you entered, so it is clear where the file lives.
  • Your sign-in session: a browser cookie and a database record with your IP address and browser details (User-Agent).
  • API tokens for Claude Code, if you create any (only a hash is stored, never the token itself).
  • Web server logs: IP address, time, page address. Used to protect the service from overload and attacks.

The service does not store documents or files — only note text and links.

Cookies

Only the necessary ones: the session cookie and the chosen language. No analytics, ads or third-party trackers.

Who can see your data

  • You see your notes. A public catalog will come later: only what you choose to publish goes there, and only after approval.
  • The owner, as administrator, has technical access to the database and uses it only to run the service: approving new users, blocking, backups, fixing errors.
  • We do not sell or share your data with third parties. Only these are involved: Google — sign-in; VDSina — hosting (server in Amsterdam, the Netherlands).
  • Tag suggestions by a language model are not enabled yet. Before enabling them we will update this page to say what text is sent and where.

Retention and deletion

Data is kept while you have an account. Database backups are made daily and kept for up to 14 days on the server and up to 90 days on the administrator's computer. To delete your account and all data, write to spldlehich@gmail.com: we delete it within 30 days, and it leaves the backups as they rotate. You can also revoke the service's access in your Google Account settings ("Third-party apps & services").

Changes

If this policy changes, we will update this page and the date at the top.