Privacy policy

Last changed: 2026-11-05.

Who is responsible

Simple House Planner is run by Simon Ole Wagenfuehrer. For anything in this policy, write to support@simplehouseplanner.com.

Plans in your browser

Without an account, the editor keeps your project, its undo history, its settings and your custom furniture in your browser's own storage (IndexedDB). This data does not reach us. Opening and saving .plan files and exporting images happen on your device.

Your account

An account is optional for the website. It holds your email address, the name and profile picture that Google shares when you sign in with it, whether a Google account is connected (their account ID, not their passwords or access tokens), the passkeys you add (their public key, name and date; the private key stays on your device or in your password manager), and your sessions (when each began, and the IP address and browser it came from). We use these to sign you in and to keep your account safe, which is what you ask for when you use an account (GDPR Article 6(1)(b)).

Plans in your account

When you save a plan to your account, or an assistant builds one there, we store the plan with everything you put in it: walls, rooms, room names, furniture, images you trace over, and any address or location you enter in the project information. We keep a short history of recent changes so that they can be undone. Only your account can open these plans. We do not use them for advertising or to train AI models.

ChatGPT and other assistants

You can connect an assistant such as ChatGPT to your account. It then receives a token that lets it read and change your plans, and you can disconnect it at any time on your account page. It asks only for your plans, and for your name and email address if it requests those permissions and you allow them.

When the assistant uses the plan tools, we receive what those tools need: plan titles, the short scripts that change a plan, and the IDs of your plans. The tools send back facts about your plan, such as rooms, areas and warnings, the date each plan last changed, and the ID of your account, which the assistant uses to tell linked accounts apart. The editor in the chat can send the assistant a picture of the floor in view. What you write in the chat is handled by the assistant's provider under its own privacy policy. We do not receive or rebuild your chat.

The community

When you share a plan or an item, its title, its contents, a preview image, your account name and the date become public: anyone can see, open and copy them. You can remove them on your account page, but copies that others already made stay with them. If you report something, we keep your account ID and your reason so that we can act on the report, and we send your reason to our support inbox by email.

Who else processes data

Cloudflare hosts the site and stores accounts and plans, with its primary location for accounts in Western Europe; it also processes request data such as your IP address and browser details to deliver and protect the site, and may keep logs. If you accept analytics cookies, PostHog, hosted in the EU, receives how you use the site: the pages you open, without their queries; the site you came from; where you click, and on public pages what you click; page speed and script errors; your browser and device; your country and city, which it works out from your IP address before it discards that address; and your account ID if you are signed in. It receives no plans, names or email addresses. We do this on the basis of your consent (GDPR Article 6(1)(a)). If you do not accept, PostHog does not load and receives nothing. The editor in an assistant never uses PostHog. Resend delivers sign-in emails and receives your email address for that, and it delivers reports to our support inbox. Cloudflare forwards mail sent to our support address to that inbox, which Google hosts. Google also takes part when you sign in with it. Some of these companies process data in the United States, under the EU's standard contractual clauses or an adequacy decision.

How long we keep data

Accounts, plans and shared items stay until you delete them. Deleting your account on the account page deletes all of them. Sessions end about a week after your last visit. Access tokens of assistants last an hour. Their refresh tokens last 30 days and end at once when you disconnect the assistant. Short-lived records of sign-in links, passkey challenges and sign-in attempts are removed within minutes to days. PostHog keeps analytics data for up to a year.

Cookies

While you are signed in, the site keeps a session cookie and a signed_in cookie that tells pages to show your account. Signing in with a passkey or Google briefly sets cookies that connect the steps of that sign-in. After each sign-in, a better-auth.last_used_login_method cookie remembers for 30 days which way you signed in. An analytics_consent cookie remembers your answer about analytics cookies for about six months. If you accept, PostHog also keeps a cookie and browser storage entries that start with ph_, for up to a year, to recognize your browser between visits. Cookie settings at the bottom of any page changes your answer, and if you decline, those entries are removed. The site sets no other cookies, and none for advertising.

Your rights

You can ask for a copy of your data, have it corrected or deleted, limit or object to how it is used, and take it with you: every plan downloads as a .plan file. If you think we handle your data wrongly, you can complain to a data protection authority.

Children

Simple House Planner is for general audiences and is not directed at children under 13.