Graf.ink is operated from https://graf.ink. We keep the account you create (email, username, display name, bio, locale) and the graphs, moments, sources, notes, comments, and messages you write. The httpOnly cookie graf_session keeps you signed in.
Public graphs, including their sourced moments, covers, and who published them, are public. Follows, likes, and comments show in the product. Direct messages stay between the two accounts. We do not sell your lists.
Hosting and processors today are Amazon Web Services in eu-central-1: Amplify (the site), RDS PostgreSQL (your data), Cognito (signup and login codes), S3 and CloudFront (covers, avatars, and moment stills). We do not use a separate analytics vendor.
If you ask for a research or description suggestion, we store what you can accept or reject. Daily quotas limit that use. A model never publishes for you. Suggestions are off by default on this host unless we turn them on later and update this page.
Public pages send a first-party beacon to /api/e. It records a day, a path class (timeline, explore, profile, or other), a referrer class (search, AI, social, direct, or other), a browser class (human, search bot, AI bot, or other), and a country code when CloudFront sends one. A daily salt hashes the network address with the browser string so we can count uniques. The address itself is not stored. The salt is deleted after a day, and the raw rows are deleted after 14 days. The beacon does not set a cookie. Bot traffic is counted apart from monthly active people. Signup, publish, enquiry, API, and MCP counts are server events without that hash.
PLACEHOLDER: counsel must review this analytics wording before it is treated as a privacy notice.
To close an account, sign in and contact the operator through the product. This notice is not legal advice.