Local by default
Your room.
Your choice to share.
The editor works without an account. Your working room stays in your browser unless you explicitly create a sharing link.
What stays on your device
Room dimensions, openings, furniture names and placements are saved in this site's browser storage (IndexedDB), as one working draft and any named rooms you explicitly save. The layout search runs on your device. This application does not include analytics, advertising trackers, third-party fonts, photo uploads or a runtime AI service.
Export a project file for a durable backup. My rooms can remove individual saved rooms. Protect browser storage requests local storage protection, not cloud backup or an account. PNG and project downloads are generated locally. To remove all local rooms and the draft, close other planner tabs and clear this site's stored data in your browser settings. This does not delete downloaded files or uploaded snapshots.
What a sharing link contains
Only Create sharing link uploads a snapshot of the room, including furniture names and measurements. Anyone with that link can view it and download an independent copy. Do not include names, addresses or other sensitive details in furniture labels.
Public access expires seven days after creation. The server stores the snapshot, its random identifier, expiry and a hash of the private deletion token. The private deletion token is shown to you when the link is created, not stored in readable form in the database. Aggregate request counters limit abuse; these counters do not identify individual visitors.
Deleting a shared snapshot
Open the complete private deletion link and explicitly confirm deletion. Keep that link private. Losing it means waiting for expiry; there is no account-based recovery. Deletion stops the public link from working, but cannot remove copies already downloaded by someone else.
Expired uploads are removed by scheduled cleanup and on new uploads. Database backups can retain deleted snapshots until the hosting operator's backup retention period ends; immediate erasure from backups is not promised.
Hosting and requests
Serving the site necessarily involves network requests. Hosting infrastructure may process IP addresses and request metadata for delivery, security and operational logs. Those retention settings are controlled by the deployment operator, not your browser. Shared and deletion pages ask search engines not to index them and use no-store responses; a secret link is not an authenticated account.
If a request fails
A timeout does not prove that an upload or deletion failed on the server. Sharing is never retried automatically. An upload whose response was lost still expires after seven days. Your local project is independent of server availability.