Security

How the OpenMyDrawing app for Android protects your files. This page describes how the service actually runs; we do not claim certifications we do not hold.

What we promise

• No account, not even to download a file. Privacy notice
• Your file is deleted as soon as it has been opened, and the pages drawn from it within 1 hour. Privacy notice
• An IFC model never leaves your device. Privacy notice
• No cookies and no trackers on this site. The server counts visits only as totals. Privacy notice

Your files

• Each file you open is read in its own short-lived process, with no network access, no access to other data, a throwaway user of its own, and hard limits on time and memory. The process ends when your page is ready.
• Your file is deleted as soon as it has been opened, and the pages drawn from it within 1 hour. It is never used for AI training, and it is processed in the EU.
• Files are never shared with anyone.
• Nothing made from your file is kept at a web address. What the server makes from it, the picture of the page and the data for measuring, comes back only in the answer to the app's own request. No address can fetch it later; a test checks every address the server answers.

The service

• All traffic is encrypted (HTTPS, with HSTS). The app opens only app.openmydrawing.com full screen; Android checks that the site names the app, signed with our key, as its own.
• The server is in the EU. The app's web service runs in a locked-down sandbox of its own: no network access beyond the server itself, no keys or passwords for payments or email, no access to other software on the server, and no stored data apart from the visit counts (totals only, without IP addresses or visitor identifiers, as described in the privacy notice).
• A strict Content Security Policy, upload size limits and per-connection rate limits.
• When a file cannot be opened, the log records only the type of error, never the file's contents.
• Software dependencies are pinned to exact versions and checked against checksums when installed.

Reporting a problem

If you find a security issue, please write to support@openmydrawing.com. Our contact details for security reports are also published at openmydrawing.com/.well-known/security.txt.