Privacy Policy
Last updated: June 7, 2026
Farfield Studio ("we", "us", "our") operates the Graph Paper website and services (the "Service").
1. Information We Collect
a. Information you provide
- Account information (email, name)
- Content you create (documents, graphs, notes)
b. Automatically collected
- Usage data (pages visited, interactions)
- Device and browser information
- IP address and approximate location
c. Payments
Payments are processed by Stripe. We do not store full payment card details.
d. Authentication
Account sign-in and identity are handled by Clerk, which processes your email, name, and login credentials on our behalf.
2. How We Use Information
We use your information to:
- Provide and operate the Service
- Save and sync your documents
- Process payments and subscriptions
- Improve performance and usability
- Communicate with you (service updates, support)
3. Data Storage and Processing
Your data is stored using third-party infrastructure providers, including Cloudflare and Clerk, which may process and store data in the United States and other jurisdictions.
We take reasonable measures to protect your data, but no system is completely secure.
4. Sharing of Information
We do not sell your personal information.
We may share data with:
- Service providers (Cloudflare for storage and delivery, Stripe for payments, Clerk for authentication)
- The Wikimedia Foundation (operator of Wikipedia), but only if you enable the optional Web access setting for the Margin AI assistant. When enabled, and only when the assistant looks something up, we send a search query composed by the assistant to Wikipedia; the Wikimedia Foundation receives that query text, your IP address, and standard request metadata. Web access is off by default.
- Legal authorities if required by law
5. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how we use it
- Request access to your personal information
- Request deletion of your personal information
- Correct inaccurate personal information
To exercise these rights, contact us at: [email protected]
We do not sell or share personal information for cross-context behavioral advertising.
6. Cookies
We use cookies for authentication and essential functionality. We do not currently use third-party analytics or advertising cookies.
7. Data Retention
We retain your data as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data.
We store the IP address of your most recent sign-in for security and abuse prevention. This sign-in IP address is automatically deleted 90 days after that sign-in.
8. Children's Privacy
The Service is not intended for children under 13.
9. Changes
We may update this policy. Continued use means acceptance of changes.