Privacy Policy
Last updated: 29 August 2026
The short version: Nalan Canvas has no accounts, no analytics, and no server that sees your notes. The only thing that ever leaves your device is a share link you choose to publish, and that is encrypted before it goes.
Who "we" is
Nalan Canvas is operated by WWB LLC. Contact: hello@nalancanvas.com.
We collect no personal data at all, so there is nothing for us to hold, sell or lose. The named entity is here because you are entitled to know who operates a service you trust with your work, not because there is a database behind it.
(WWB LLC is an incorporated entity, so its registered name and business address belong here — if you are named as an operator you should be identifiable, not just named.)
What we collect
Nothing, by default.
There is no sign-up, no login, and no profile. We do not use analytics, telemetry, cookies, tracking pixels, or advertising. We do not build a profile of you, because we have nowhere to put one.
Once loaded, the app makes no network requests at all. That is not a promise we ask you to take on trust — it is an automated check that runs on every build of Nalan Canvas and fails the build if any request leaves the page.
Where your notes live
On your device, in your browser's local storage.
If you are on a browser that supports it, you can also point Nalan Canvas at a folder on your own computer and it will keep a backup copy there. That folder is yours; we never see it.
We cannot read your notes, recover them, or restore them for you. There is no copy on our side to recover from. Export regularly.
When you publish a share link
This is the only thing that ever leaves your device, and it only happens when you ask for it.
When you publish a page:
- It is encrypted in your browser, before anything is uploaded, using AES-256-GCM.
- Only the encrypted result is uploaded. We store bytes we cannot read.
- The decryption key is placed in the part of the link after the
#. Browsers never send that part to any server, so the key never reaches us. We could not decrypt your share if we wanted to, or if we were compelled to.
A share link is unlisted, not private. Anyone who has the link can read the page. Treat the link itself as the password: if you post it publicly, the content is public. We cannot tell you who has opened it, because we do not log that.
Unpublishing. Unpublishing deletes the stored file immediately. A copy may still be served from a content-delivery cache for up to one minute afterwards, after which the link stops resolving anywhere.
What unpublishing cannot do is undo what has already been read: anyone who opened the link beforehand may have kept a copy of what they saw. Unpublishing removes the source; it cannot un-see.
Our infrastructure provider
Share storage runs on Cloudflare (Workers and R2). Cloudflare processes the network requests involved and keeps its own operational logs, which include IP addresses, in line with its own privacy terms. We do not add to those logs, and we do not connect them to anything, because we hold no identity to connect them to.
Cloudflare only ever handles ciphertext. It cannot read your notes either.
Your data, your control
Because your notes never reach us, most data requests have a simpler answer than usual:
- Access — everything is already on your device. Export gives you a complete copy in a documented, open format.
- Deletion — clearing the app's storage, or your browser data, removes everything. Unpublish removes any share you published.
- Portability — export produces a file you own and can read without us.
If you want to ask about any of this, write to hello@nalancanvas.com.
Children
Nalan Canvas is not directed at children and collects no personal information from anyone, so there is nothing to collect from a child either.
Changes
If this policy changes materially, the updated date above changes and the previous version stays available in the project's history.
Contact
hello@nalancanvas.com