Data Security
Last updated: July 19, 2026
This page explains exactly how ThermoSketch handles your data, in plain terms you can verify against our Privacy Policy.
Zero Data Retention
Your simulation inputs and outputs are never stored on our servers, on any plan,
whether you're on the free tier or a paid subscription. You submit your parameters,
we run the calculation, and the results go straight back to your browser. There is no
cloud project-storage feature. When you want to keep a copy, use the Download button in
the results area to save a .json file to your own device.
What We Log
Our system logs record only operational metadata: your user ID, which tool you used, node counts, how long the calculation took, and any error codes. They do not record your simulation parameters or geometry. Usage logs are deleted automatically after 30 days. Error logs are kept for 90 days.
Sending Diagnostics After a Failure
If a calculation fails, you can choose to click Send Diagnostics to submit the specific parameters that caused the failure to our support team for investigation. This only happens when you click Send. Nothing is sent automatically, and this is the only situation where your simulation data reaches our backend. It does not change how we handle your data during normal use of the Service.
How Modal Processes Your Calculations
Your calculations run on Modal's infrastructure. While a calculation is being processed, Modal's platform temporarily stores encrypted request and response data for up to 7 days as part of its own operations. Modal has contractually agreed not to access the content of this data, and this retention window is outside our own control. We are telling you about it so you have the complete picture, not just the reassuring parts.
AI-Assisted Features
Some paid plans include AI-assisted features, like a chat assistant that can run analysis tools for you. When you use these features, your current session's design parameters, tool-call context, and chat messages are sent to a third-party AI provider to generate a response. We can switch providers without changing the product, so the providers we use may include Anthropic, OpenAI, or Google (Gemini/Vertex AI). Each provider's commercial API tier does not train on your data by default, based on their own published policies. See our Privacy Policy for each provider's exact data-retention window.
Who We Work With
We rely on a small number of service providers to run ThermoSketch. Modal runs our calculations (see above for how it handles your data). Supabase hosts our authentication and account database. Cloudflare hosts our website and content delivery. Dodo Payments processes your subscription payments as our merchant of record; they handle your card details directly, and we never see or store them. Our Privacy Policy has the full list, including retention periods and where each provider processes your data.
For EU and UK Users (GDPR)
If you are in the EU or UK, here is how GDPR applies to ThermoSketch. We collect only what is necessary to run your account and subscription: your email, authentication details, and billing status. We do not collect or store your simulation data, so there is no cloud-storage feature requiring your consent. Account and subscription data are necessary to provide the Service under our contract with you, so we do not need a separate consent banner for this data. See our Privacy Policy for your full rights, including access, correction, and deletion.