Last updated 2 September 2026. Planche is made and operated by deploy, a sole proprietorship registered in the Republic of Korea and owned by Juwon Jeong (“we”, “us”), at 1114 Gyeongui-ro, 4th floor, Room 405, Paju-si, Gyeonggi-do, Republic of Korea. Contact: planche.dev@gmail.com. This policy explains what Planche keeps on your computer, the little that reaches us or a service we use, and what you can do about it. It covers the website and web application at planche.dev and the local agent.
Planche is built so that we do not receive your data. Connection profiles, passwords, queries, results and history stay in your browser and on your computer, and the agent talks to your databases from your own machine. There is no account unless you turn on connection sync. What does reach us is listed below, and each item says how to turn it off.
The application keeps its state in your browser’s storage for the planche.dev origin (or for the agent’s address, when the agent serves the application): connection profiles, query history and editor history, settings, saved ERD layouts, column widths, and your Pro licence key. Passwords are only stored if you turn on “Save password” for a profile. SQLite files opened in the browser are cached in the browser’s private file system so they survive a reload.
The agent keeps a directory ~/.planche with the SSH host keys it has accepted, a local count of how often the Pro features were used, and the time of its last update check. That count never leaves your computer; deleting the file is supported.
All of this is under your control: clear the site’s data in your browser, or delete the directory, and it is gone. We have no copy.
Hosting. planche.dev is served by Cloudflare, Inc. from its network. Like any web host, Cloudflare processes your IP address and request headers to deliver the site and to protect it from abuse, under Cloudflare’s privacy policy. We do not keep access logs of our own.
Product analytics. The hosted application at planche.dev reports usage events to Google Analytics 4, with IP anonymisation enabled. Events are categorical: which kind of database engine was connected, which feature or dialog was used, what kind of statement ran (a SELECT, an UPDATE), whether it succeeded. They never contain SQL text, host names, database, table, column or user names, file names, or results. You can turn analytics off in Settings at any time, and it is never loaded in a copy of the application served by the agent. Google’s processing is described in Google’s privacy policy.
The local agent. The agent connects only to your databases and to your browser. On startup it makes one request to planche.dev to check whether the hosted application is reachable, so it can serve its own copy when you are offline; that request carries no data about you beyond what any HTTP request carries. A standalone install (the install.sh / install.ps1 scripts) checks the npm registry for a newer version at most once a day; set PLANCHE_NO_UPDATE_CHECK=1 to stop that. Running npx planche downloads the package from npm, under npm’s privacy policy.
Buying Pro. Purchases are handled by a payment provider acting as merchant of record, named at checkout and on your receipt. At checkout the provider collects your name, email address, billing country, payment details and the transaction record, under its own privacy policy; we never see your card number. From the provider we receive your name, email address, country, the amount and the order and subscription identifiers, which we use to issue your licence key, to renew it, and to answer support requests. Your licence key itself contains the name or email you bought with, so that a key pasted into the wrong place is obvious, and it is stored in your browser. We keep purchase records for as long as tax and accounting law requires us to.
Connection sync. If you turn on sync you sign in with GitHub or Google. We then store the identifier and email address the provider gives us, a session cookie, your encrypted vault, and the time it last changed. The vault is encrypted in your browser with a passphrase that never leaves your machine, so we cannot read what is in it. Sync data is stored on Cloudflare’s infrastructure. You can delete the account and the vault from the application, or by writing to us.
AI features. If you configure a language-model provider, the agent on your computer sends that provider the failing statement with secrets masked, the database’s error message, and the column names of the tables the statement refers to. This goes directly to the provider, under its terms; nothing about it reaches planche.dev.
Email. If you write to us, we keep the correspondence for as long as needed to deal with your request and any follow-up.
The site and the application set no cookies of their own, with two exceptions: Google Analytics sets its cookies while analytics is on, and signing in to connection sync sets one session cookie that identifies your sign-in. Neither is used for advertising.
Where the GDPR or a similar law applies: hosting, purchase handling and sync are necessary to provide the service you asked for (contract); protecting the site from abuse and understanding which features are used are our legitimate interests, and analytics comes with an opt-out; purchase records are kept because the law obliges us to. Google keeps analytics events for at most 14 months. Sync data is kept until you delete it. Purchase records are kept for the period tax law requires and then deleted.
Only the services named above — Cloudflare, Google, the payment provider, npm, and any AI provider you choose yourself — each acting under its own policy. We do not sell data, share it for advertising, or hand it to anyone else unless the law requires it. These providers are in the United States or operate globally; where the law requires it, transfers rest on the European Commission’s standard contractual clauses or an equivalent mechanism the provider offers.
You can ask us what we hold about you, have it corrected or deleted, receive a copy of it, or object to our processing, by writing to the address below. Most of the data described here is on your own computer and can be deleted by you directly. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your data-protection authority; in the Republic of Korea, to the Personal Information Protection Commission.
Planche is a tool for people who work with databases and is not directed at children under 14. We do not knowingly collect data from them.
When this policy changes, the date at the top changes with it. A change that widens what we collect is announced in the application before it takes effect.
Questions or requests about your data: planche.dev@gmail.com.
Planche has a free tier that needs no account and uploads none of your data — connection profiles live only in your browser. A few advanced features need Pro; see pricing.