Last updated 6 September 2026

Privacy.

Diane is a comment box. It holds as little as a comment box can, and this page is short because there is not much to describe.

Diane is made and run by Lukas Bartak, Czech Republic — hello@diane.to.

Where the line runs

Your account — the address and name Google gives us when you sign in — is held by Diane, and used for nothing but signing you in and writing to you about the service.

Everything written on your own site is yours. You decide to run a comment box, you decide what stays and what goes, and Diane holds and serves those comments on your instructions and nobody else's. What appears on your domain is yours to answer for, including what your visitors write there.

What we hold about you, as a customer

• The e-mail address, name and account identifier your Google account gives us when you sign in. We ask Google for nothing else.
• The domains you register and the labels you give them.

We use these to sign you in, to show you your own sites and nobody else's, and to write to you about the service. The lawful basis is performance of the agreement between us.

What we hold about people who comment

• The name they typed, the text they wrote, and when.
• An unsalted SHA-256 hash of their IP address, used only to compare one submission against another for rate limiting. The address itself is never written down, and the hash is never returned by any endpoint.

For this data the site owner decides why it is collected and we only act on their instructions. If you run a site with Diane on it, that makes you the controller and us your processor.

Cookies

The widget sets none and reads none, on any site it appears on. The console at admin.diane.to sets exactly one: a signed session cookie, so that you stay signed in. Nothing about it is used for analytics, because there are none.

Who else sees it

Cloudflare, which runs the service and stores the database, and Google, which handles signing in. Nobody else. We do not sell data, share it for advertising, or load a third-party script anywhere.

How long we keep it

• Comments stay until the site owner deletes them, or until the site is deleted. Deleted comments are kept briefly so a deletion can be undone.
• Account data stays until you ask us to remove it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to move it somewhere else. Write to hello@diane.to and we will answer within a month.

Changes

If this page changes materially we will say so here and date it. What the service itself promises, and what happens if it stops, is on the terms page.