How we protect Diagla
- Every page and request uses an encrypted connection (HTTPS).
- Diagla runs on Cloudflare's network, which filters attacks before they reach the service.
- The browser key cookie can't be read by page scripts, and writes are accepted only from diagla.com itself.
- Uploaded files are served with strict rules so they can't run code in your browser.
- Website reading only reaches public addresses, never private networks.
- Keys and passwords live in Cloudflare's encrypted secret storage, never in our code.
- Rate limits slow down automated abuse of drawing and the contact page.
- Card details stay with our payment processor; Diagla never sees full card numbers.
What you can do
- Share a link only with people who should see the diagram, and turn it off when it's no longer needed.
- Don't put passwords, card numbers or other secrets into a diagram.
- Keep the browser you use for Diagla up to date.
No system is perfect
We work to protect your content, but no service on the internet can promise complete security. If we learn of a breach that affects your information, we tell affected members as the law requires.
Reporting a security issue
If you find a vulnerability, write to hello@diagla.com with the steps to reproduce it. Please give us a reasonable chance to fix it before telling others, and don't access other members' content, disrupt the service or run automated scans that degrade it. We don't take legal action against good-faith research that follows these rules.