rhomlet.
Privacy and browser storage
Last updated: 19 September 2026. Notice version 2.Who operates Rhomlet?
Rhomlet is operated by OÜ tulevik.EU. Contact info@rhomlet.com for privacy questions or requests.
Your artwork stays on your device
The editor processes imported images, project files, palettes, and clipboard images locally. The application does not upload this content to us. Editing requires no account. The editor has no analytics, advertisements, tracking pixels, or third-party font requests. Clipboard access happens when you use a copy/paste action and may require browser permission. Downloads save files to your device.
Cookies and similar storage
The website and account service use session and CSRF-protection cookies for secure requests and sign-in. These are not tracking cookies. Browser storage can still fall under rules for accessing information on your device. We ask before enabling optional persistent storage. Rejecting it does not prevent editing, importing, or downloading files. A small first-party privacy-choice record is used only to remember your decision.
| Purpose | Data and retention | Choice |
|---|---|---|
| Privacy choice | rhomlet-privacy in localStorage: notice version, timestamp, and selected options. Kept until replaced or you clear site data. | Required to remember your choice; not used for tracking. |
| Browser project saving | rhomlet-studio IndexedDB: artwork, project names, layers, frames, normal maps, and undo/redo history. Open projects remain until you delete them or clear site data. Closed projects are bounded to 8 entries and 32 MB total; oldest entries are pruned as needed. History is limited to 8 MB per project and 32 MB across open projects, up to 40 steps on each stack. No separate recovery snapshots. | Off until you allow it. |
| Editor preferences | rhomlet-* localStorage keys for theme, tools, palettes, shortcuts, and layouts. Replaced when changed, retained until deleted or site data is cleared. | Off until you allow it. |
Storage is specific to your browser profile and site address. Browser settings, private browsing, or storage pressure may remove it. A requested persistent-storage permission can reduce automatic eviction, but is not a backup. Download project files for permanent copies.
Accounts and sessions
For provisioned accounts, the service stores a name, email address, and hashed password. Server-side sessions support sign-in across Rhomlet subdomains and administrative access where authorized. Sessions expire after inactivity; signing out invalidates the current session. Account access does not upload editor artwork. Contact us about account data or deletion.
Changing choices, access, and deletion
Open Edit > Preferences > Privacy & storage to change your choices at any time. Turning optional storage off stops future use; existing stored data is not automatically erased. The same dialog lets you download all stored Rhomlet data or delete it. Deletion leaves only the privacy-choice record and keeps currently open artwork in memory until you leave. To remove the privacy-choice record too, clear this site’s data in your browser. Files you downloaded are not removed.
Hosting and connection data
Loading any website sends connection information such as your IP address, requested URL, browser headers, and time of request to the web server. The public site is hosted by Veebimajutus.ee (Elkdata OÜ, Estonia). The provider may process access/error logs to deliver and secure the service. The editor’s storage choices do not control these server-side records. Elkdata’s published data-processing policy states that processing generally takes place within the EU/EEA, with provisions for transfers outside it.
Legal bases and your rights
Optional browser persistence is enabled on the basis of your consent; withdrawing it does not affect past lawful processing. Remembering your privacy decision supports compliance with your choice. Necessary connection processing is for delivering and securing the requested service. We do not sell personal information, use automated profiling, or make automated decisions about you.
Where GDPR applies, you may request access, correction, erasure, restriction, or portability of personal data and object to processing based on legitimate interests. Contact info@rhomlet.com. We cannot remotely access or delete project data that exists only in your browser; use the local controls described above. You may complain to your local data-protection authority or the Estonian Data Protection Inspectorate (AKI). Rights depend on the type and legal basis of processing.
Changes
If we introduce new purposes such as analytics, we will update this notice and request any required consent before that processing starts. External links only load when you choose to follow them and are governed by their operators’ notices.