Last updated 19 October 2026

Privacy.

Diane is a comment box. It holds as little as a comment box can, and this page is short because there is not much to describe.

Diane is made and run by Aquasoup, Czech Republic — hello@diane.to.

Where the line runs

Your account — the address and name Google gives us when you sign in — is held by Diane, and used for nothing but signing you in and writing to you about the service.

Everything written on your own site is yours. You decide to run a comment box, you decide what stays and what goes, and Diane holds and serves those comments on your instructions and nobody else's. What appears on your domain is yours to answer for, including what your visitors write there.

What we hold about you, as a customer

• The e-mail address, name and account identifier your Google account gives us when you sign in. We ask Google for nothing else.
• The domains you register and the labels you give them.

We use these to sign you in, to show you your own sites and nobody else's, and to write to you about the service. The lawful basis is performance of the agreement between us.

What we hold about people who comment

• The name they typed, the text they wrote, and when.
• An unsalted SHA-256 hash of their IP address, used only to compare one submission against another for rate limiting. The address itself is never written down, and the hash is never returned by any endpoint.

For this data the site owner decides why it is collected and we only act on their instructions. If you run a site with Diane on it, that makes you the controller and us your processor.

Cookies

The widget sets none and reads none, on any site it appears on. One thing does stay in the browser, and it is not a cookie: while a comment is waiting to be approved by the site's owner, the widget keeps its id in localStorage on that site's own domain — the id and the page it was written on, never the text. It is the only reason somebody can reload the page and still see what they wrote. Only that site can read it, it never reaches us, nobody can be assembled out of it, and it is dropped as soon as the comment is published or deleted. The console at admin.diane.to sets two: a signed session cookie so that you stay signed in, and one that lives for the ten minutes of signing in and guards the return trip from Google. Neither is used for measurement. Nothing on your site is measured — the one thing that ever leaves your page is a click: the “Powered by Diane.to” link carries your domain in its address, so we can see which sites send people here. Nobody clicks, nothing is sent.

What diane.to measures

This site — not the widget, not your page — counts its own visits with Umami. No cookie, no browser fingerprint, nothing that outlives the visit, so none of it assembles into a person or joins up with your account. What is kept is which page was opened, where the visit came from, the campaign tags in the address (utm_…) if there are any, the country and the kind of browser, and a handful of clicks on links that lead away from here. Your IP address is what the country is worked out from and what tells one visit from another; it is not stored. The script and the collection both run on our own server in the EU, so the browser talks to nobody but us.

Who else sees it

Cloudflare, which runs the service and stores the database, and Google, which handles signing in. If you turn notifications on, they travel through whichever push service your own browser uses — Google, Mozilla or Apple — which sees that a notification reached you and not what it said, because the contents are encrypted for your browser alone. Nobody else. We do not sell data, share it for advertising, or have your browser load a script from a domain that is not ours.

How long we keep it

• Comments stay until the site owner deletes them. A deleted comment stops being served the moment it goes and stops counting against the site's limit, but the row is kept out of sight so the deletion can be undone. Ask us and it is gone for good.
• Account data stays until you ask us to remove it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to move it somewhere else. Write to hello@diane.to and we will answer within a month.

Changes

If this page changes materially we will say so here and date it. What the service itself promises, and what happens if it stops, is on the terms page.