Windows / Privacy Policy

Privacy Policy

What Vector Designer for Windows sends, when, and to whom. The short version: the application works entirely on your computer; it talks to the network only for four things you can see, and none of them needs an account. There is no advertising, no analytics SDK and no tracker — in the app or on this site.

Effective 2 September 2026 · applies to SVG Editor - Vector Designer for Windows, version 26.2 and later, downloaded from this site or installed from the Microsoft Store.

Overview

In one table

Every network connection the application can make, and what triggers it. Nothing else leaves your computer.

FeatureWhenWhat is sentTo whom
Send FeedbackOnly when you press SendYour text, the screenshots you attach, a technical context (app version, Windows version, host name, locale, keyboard layout, screen size)Our feedback server, svgfeedback.onrender.com (hosted on Render)
Crash reportAt the launch after a crash, if the option is onThe crash text: exception, call stack, the last window messages, the same technical context. No document contentThe same feedback server
AI ConsoleOnly when you press Send in the consoleYour prompt, the images you attached, the SVG of the document open in the console (with the images placed in it), a random device idOur AI proxy on the same server, which forwards the prompt to the AI provider it is configured with (OpenAI, Anthropic or Google). With your own key: directly to that provider
Check for UpdatesHelp › Check for Updates…, and once a day if you allowed it (direct-download copy only)A plain GET of the update feed. No personal dataThis website, rainbowfactory.uk
MCP server, scriptsNothing: local only
Help › Send Feedback…

Send Feedback

The Feedback palette (Window › Feedback, Ctrl+Alt+F, the speech-bubble button on the canvas, or Help › Send Feedback…) lets you write to us. Nothing is sent until you press Send. When you do, the application posts one report to our feedback server at https://svgfeedback.onrender.com, a service we run on Render (Render Services, Inc., USA). The report contains:

  • the text you wrote;
  • the screenshots and files you attached, if any (up to ten, 5 MB each). An .ai, .pdf or .svg you attach is sent as a preview and as the original file, because that is what lets us reproduce a problem;
  • a technical context: the application version and build, the Windows version, the computer’s host name, the display language (locale), the keyboard layout, the screen size and scale, and — if a document is open — the active tool, the zoom and the colour mode. Not the document itself.

If you are offline the report is queued in %LOCALAPPDATA%\SVGEData\feedback-outbox\ on your computer and sent the next time the application starts with a connection. You can delete that folder at any time.

The host name is included so that several reports from the same machine can be read together. It is the only identifier in a feedback report; there is no account and no e-mail address unless you type one in the text.

Edit › Options › Debug

Crash reports

If the application crashes, it writes a plain-text report on your computer (in C:\dumps if that folder exists or can be created, otherwise in your temporary folder). At the next launch, if Send diagnostic logs automatically is on in Edit › Options › Debug (it is on by default), that text is sent to the same feedback server as one report and the local copy is removed from the queue.

The report contains the exception type, the call stack with module names and offsets, the last window messages received, the active tool and document path if any, and the same technical context as a feedback report (version, Windows version, host name, locale, keyboard, screen). It does not contain the content of your documents. Turn the option off and nothing is sent; you can still send the latest report by hand with Send Logs Now, or open the folder with Reveal Log File.

Window › AI Console

AI Console

The AI Console turns a description into editable vector artwork. It only talks to the network when you press Send. What happens depends on the engine chosen in Edit › Options › AI:

Native (server) — the default, and the only engine in the Microsoft Store version

  • Your prompt, the reference images you attached (if any), the conversation so far and the SVG of the document that is open — the AI edits your drawing, so it has to see it — including the bitmap images placed in it, are sent to our AI proxy at https://svgfeedback.onrender.com. Do not use the console on a document you would not send to a third party.
  • The proxy forwards the prompt to the AI provider it is configured with — one of OpenAI (USA), Anthropic (USA) or Google (USA) — and returns the generated vectors to you. The provider processes the prompt under its own terms and privacy policy; we do not send it anything that identifies you.
  • The application sends a random device id with each request: a UUID generated the first time and stored in the Windows registry under HKEY_CURRENT_USER\Software\SVGEditor. It exists only so that the proxy can enforce a limit of 50 requests per day per device; it is not linked to a person, an account or a computer name.
  • The console also fetches the proxy’s configuration (which model and prompt version are active) so that it can show them to you.

Your own key (Claude, OpenAI, Gemini) — direct-download version only

  • The prompt, the images, the open document and the conversation go directly from your computer to the provider you chose, with your key, under that provider’s terms. Nothing passes through our server, and there is no daily limit from us.
  • Your API keys are stored on your computer only, encrypted with Windows Data Protection (DPAPI) for your user account. Test next to a key makes one request to that provider to check it.

Conversations are kept locally in %LOCALAPPDATA%\SVGEData\ so that you can reopen them; they are not uploaded anywhere except as part of a request you send.

Help › Check for Updates…

Check for Updates

In the copy downloaded from this site, Help › Check for Updates… fetches https://www.rainbowfactory.uk/svg-editor/updates/appcast-windows.xml with a plain HTTP GET and compares the version in it with the one you have. On the second launch the application asks whether it may do this check once a day by itself; the answer is a switch in Edit › Options › General. No personal data is sent: the request carries no identifier, and we do not log who asked.

If you choose to install an update, the application downloads the new package from this site, verifies its signature, and replaces itself. In the Microsoft Store version there is no update check at all: updates come from the Store, under Microsoft’s privacy statement.

Local only

MCP server and scripts

The application can act as an MCP server (svgeditor.exe --mcp-stdio) so that an AI client on your computer — Claude Code, Claude Desktop, Codex, VS Code — can drive its drawing tools. This runs entirely on your machine: the client and the application exchange JSON messages over standard input and output and a local mailbox folder; no network connection is opened by Vector Designer. What that AI client itself sends to its own provider is governed by the client’s policy, not by this one. The Allow external control switch in Edit › Options › MCP Server turns the whole channel off.

Scripts (.jsx) run inside the application with no network access.

On your computer

What stays on your computer

  • Your documents. Vector Designer opens and saves files where you tell it to. It never uploads a document, except the files you deliberately attach to a feedback report or the images you attach to an AI prompt.
  • Preferences (palette positions, options, recent files, the device id above) in the Windows registry under HKEY_CURRENT_USER\Software\SVGEditor, and application data (AI conversations, feedback queue, update downloads) in %LOCALAPPDATA%\SVGEData\.
  • API keys for the AI engines, encrypted with DPAPI (direct-download version only).
  • Crash reports as plain text, as described above.

Uninstalling the application does not delete these; you can remove the registry key and the folder yourself.

rainbowfactory.uk

This website

This site is static pages. It sets no cookies of its own, runs no analytics and embeds no advertising. Fonts are loaded from Google Fonts (Google LLC), which receives your browser’s request for the font files. Links to Discord, the Mac App Store and GitHub lead to those services and their policies. Our hosting provider keeps ordinary server logs (IP address, requested page, time) for the operation of the site.

Retention, your rights, contact

Retention, your rights, contact

Data controller: Rainbowfactory Ltd, London, United Kingdom (the company also trades as Rainbow Factory). Registered office: 24 Fitzroy Square, London, England, W1T 6EP. Company number: 14629999. E-mail for privacy requests: support@rainbowfactory.uk. You can also reach us on Discord.

Why we process it. Feedback and crash reports are processed to fix bugs and improve the application (our legitimate interest, and your request when you press Send). AI requests are processed to provide the feature you asked for. Update checks are processed to deliver the version you asked for. Nothing is used for advertising or profiling, and nothing is sold.

How long we keep it. Feedback and crash reports are kept on our feedback server for as long as the issue they describe is open, and at most 12 months. AI requests are not stored by our proxy beyond the daily request counter, which resets every day; what the AI provider retains is described in its own policy. The update feed is a public file and records nothing.

Where. Our feedback server and AI proxy run on Render (Render Services, Inc.) in the Oregon region of the United States. AI providers are in the United States.

Your rights. Under the UK GDPR and, where it applies, the EU GDPR you can ask us what we hold about you, ask for it to be corrected or deleted, object to the processing, or complain to the Information Commissioner’s Office. Because reports carry no account and no e-mail address, a request should mention the host name and approximate date of the report so that we can find it. Write to the e-mail address above.

Children. The application is not directed at children and collects no personal data from anyone as part of normal use.

Changes. When the application gains or loses a network feature, this page changes with it, and the date at the top is updated. The changelog says which version introduced what.