Privacy policy
Last updated 25 October 2026
TrattoCAD lets you open .DWG and .DXF drawings in your browser, share them with a link and comment on them. This page explains what we keep, why, for how long, and what you can ask us to do. In short: we keep only what the service needs to work, we do not sell anything about you, and there are no ads or trackers.
Who is responsible
TrattoCAD is run by Kais Trabelsi, who is the data controller. You can reach us at hello@trattocad.com for anything about your data.
What we keep and why
Drawings you open
When you open a file, it is uploaded to our servers so that it can be converted into the view you see and shown to the people you give its link to. We keep the original file, its name, its size and the converted view. The link is random and unlisted. We do not look at your drawings, and we do not use them for anything else, including training any software.
How long: until you delete the drawing from the Share window, or automatically after 30 days in which nobody has opened it. The copy made on the conversion server is deleted as soon as the conversion ends, and in any case within one hour.
Comments
When you comment, we keep the name you typed, the text, the point on the drawing and the time. Comments are visible to everyone who has the link. They are deleted with the drawing, or earlier by their author or by the person who uploaded the drawing.
Technical data for safety
To stop abuse, such as automated mass uploads, we count requests per network address. We never store the address itself: only a one-way, salted fingerprint of it, which is deleted after two days. Our hosting provider also processes network addresses to deliver the site and protect it from attacks.
Your account
If you create an account, we keep your email address, your name if you give it, a one-way hash of your password (never the password itself), the date you joined, and the list of drawings you opened while signed in. We use your email to confirm your address, to let you reset your password and to send messages about your account or subscription. A cookie keeps you signed in; it is strictly necessary for the account to work and is removed when you sign out.
How long: until you delete your account from your account page. Deleting it removes your account, your drawings and their comments. Records we must keep by law, such as invoices, are kept by our payment provider.
Payments
Pro subscriptions are sold through Paddle.com, which acts as the reseller and merchant of record: Paddle processes your payment details, calculates taxes and issues invoices. We never see or store your card details. Paddle tells us the status of your subscription so that we can enable Pro on your account.
Beta waiting list
If you join the Pro beta, we keep your email address and the date. We use it only to tell you when the beta opens. You can withdraw at any time by writing to us, and we delete it.
What stays in your browser
Your browser's local storage keeps the key that lets you delete a drawing you uploaded, the keys for your own comments and the name you last used. This stays on your device and is not a cookie. We use no cookies for tracking, no analytics and no advertising.
Legal basis
We process drawings, comments, account data and technical data because they are needed to provide the service you ask for (Article 6(1)(b) GDPR) and, for abuse prevention, on our legitimate interest in keeping the service safe (Article 6(1)(f)). We keep your beta email on the basis of your consent (Article 6(1)(a)), which you can withdraw at any time.
Who processes data for us
- Cloudflare, Inc. hosts the website, stores drawings and comments, and protects the service. Cloudflare operates a worldwide network, so data may be processed outside the European Union, under the European Commission's Standard Contractual Clauses.
- Paddle.com Market Ltd (United Kingdom) sells Pro subscriptions as merchant of record and processes payments.
- Hetzner Online GmbH (Germany) runs the server that converts your drawings. Files stay there only while they are converted.
We do not sell or share your data with anyone else, except where the law requires it.
Your rights
You can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Write to hello@trattocad.com; we answer within one month. You can also complain to a data protection authority, for example the Italian Garante per la protezione dei dati personali.
Children
TrattoCAD is meant for professionals and is not directed at children under 16.
Changes
If we change this policy, we will update the date at the top of this page. For important changes that affect data you have already given us, we will tell you on the site before they apply.