Privacy Policy
Last updated: October 9, 2026
This policy explains what data Quably (quably.in) collects, why we collect it, and how long we keep it. The short version: we collect as little as possible, we don't sell it, and we don't run ad trackers. The details are below.
1. What we collect
- Quably Drop: We store the files and text you upload, the expiry time you choose, and a hashed version of your IP address used only for rate limiting. We do not store your raw IP address.
- Study Board: When you create a board, we store the board content (drawings, notes, and shapes) so it can be reopened from its link, along with the expiry setting you pick. Boards you keep only in your browser are stored locally on your device, not on our servers.
- Quably Duel: We store the duel you create, the questions used, the nickname you enter, and your scores so both players can see the result. A hashed version of your IP address is used only for rate limiting. Duels are removed automatically after they expire.
- Quably Beam: We store the text, links and files you beam into a room so they can appear on the other device, along with a hashed version of your IP address used only for rate limiting. Beams and their files are deleted automatically after they expire (within 24 hours).
- Quably Tools: Most tools run entirely in your browser. The text, numbers, or files you enter are processed on your device and are not sent to or stored on our servers.
- Server logs: Standard web server logs (request path, timestamp, hashed IP, and HTTP status) are kept for a short period for security and debugging, then deleted.
2. How we use your data
- To deliver the drop or board you created when someone opens its link
- To enforce rate limits and protect the service from abuse
- To find and fix technical problems
We do not sell, rent, or share your data with advertisers. We have no advertising partners.
3. How long we keep it
Drop content is automatically and permanently deleted when the drop expires. Boards with an expiry are removed the same way once their time is up. Expired content is purged on a regular automated schedule.
Rate-limit records are cleared once their time window closes.
4. Cookies and tracking
Quably uses a single session cookie for CSRF protection, which keeps forms secure. It's a functional cookie and does not follow you across other websites. Some pages use your browser's local storage to remember things on your own device — for example, your recent boards. That data stays on your device and is not sent to us. We do not use advertising cookies or third-party analytics beacons.
5. Security
Uploaded files are stored in a non-public directory with script execution disabled. Downloads are served through a controlled handler rather than direct file URLs. Database access uses parameterised queries to guard against injection, and connections to the service use HTTPS.
6. Your choices
Because Quably doesn't require an account, we usually can't tell which drop or board belongs to which person after the fact. If you created something and want it removed early, email us the drop or board code and we can delete it manually. You can also clear locally stored data (like recent boards) by clearing your browser storage for this site.
7. Children's privacy
Quably is not directed at children under 13, and we do not knowingly collect personal information from them.
8. Changes to this policy
We may update this policy from time to time. When we do, we'll change the "last updated" date above. Continued use of the service after an update means you accept the revised policy.
9. Contact
For any privacy question, email quably.in@gmail.com or use our contact page.