Privacy Policy

Effective October 15, 2026

Kiln (editkiln.com) is a set of free creative apps that run in your browser. This policy says what we collect, why, and what you can do about it. Questions: [email protected].

Using the editors without an account

The editors run on your device. Files you open are read by your browser and are not uploaded to us. Preferences are kept in your browser's storage. You don't need an account for any editing feature.

Kiln Cloud accounts

If you sign in with Google or GitHub, we receive and keep your email address, your name and the address of your profile picture, and the provider's ID for your account. We use them only to sign you in, to show who is signed in, and to contact you about your account if we must. We never see your Google or GitHub password, and we don't ask for access to anything else in those accounts.

When you save to Kiln Cloud we store the projects you save (the document and the images, footage and other files inside it), a thumbnail of each, earlier versions (see below), your library (colors, files and saved media you add), and for each signed-in browser or app a short device label (such as “Chrome on Mac”, taken from the browser's user agent) and when it was last used. Your projects are private: only you can open them, unless you turn on a view-only link for a project, which lets anyone with that link open a copy of its latest version until you turn the link off.

Your data is stored with Cloudflare (Cloudflare D1 and R2), which hosts Kiln. We don't sell your data, show ads, or use your projects to train AI models.

How long we keep it

• Projects: until you delete them. Deleted projects stay in your Trash for 30 days, then are deleted for good.
• Versions: every manual save (up to the latest 50), the latest 20 autosaves, and one autosave a day for 30 days.
• Your account: until you delete it on your account page. Deleting it removes your account, sign-ins, projects, history and library straight away from our database; the stored files are erased within a few hours.
• Share rooms (live collaboration): deleted 30 days after their last visit.

Other features

Share stores the document you share in a collaboration room so the people you send the link to can open it. AI sends your instruction and a preview of the canvas from your browser straight to the AI provider you connect; Kiln's own small models run on your device. Images and media search sends your search words to the media sources searched (such as Openverse and Wikimedia Commons), some through our server.

Analytics and cookies

We use Google Analytics to count visits and see which pages are useful. When you sign in we set two cookies: kiln_session, which keeps you signed in (90 days, renewed as you use Kiln), and kiln_in, which only tells our pages that this browser has signed in. Cloudflare processes your IP address to deliver the site and protect it from abuse.

Your choices

You can download a list of what your account holds, sign out other devices, and delete your account on your account page. To ask for a copy of your data or anything else about your privacy, email [email protected]. Kiln is not for children under 13.

Changes

If this policy changes in a way that matters, we'll update the date above and tell signed-in users before it takes effect.