Privacy

Last updated October 4, 2026

When you visit the site

The site is hosted by Vercel. To serve each page, Vercel receives your request (including your IP address and browser details) and keeps standard request logs for a limited time, under Vercel's privacy policy. Fonts, images and scripts all come from this site, so pages don't contact any other company. The one exception is usage statistics (below), which are relayed to PostHog through this site. Links to GitHub and npm only do so if you follow them.

Usage statistics

We use PostHog to count visits and how the site is used, such as which docs pages are read and whether the playground's buttons get used, so we know what to improve. It runs without cookies and doesn't recognize you across visits. Events record what happened (for example "image link copied"), never the text of your wireframes. The data goes through tsquare.dev to PostHog in the US and is covered by PostHog's privacy policy.

When you use the playground

To draw the picture, the playground sends your wireframe text to our server, which renders it and sends the image back. The text is handled in memory and not saved.

The playground remembers your current wireframe and your light or dark theme in your own browser (local storage), so they're still there when you come back. It never leaves your device that way, and clearing this site's data removes it.

When you use the MCP server

If you connect an AI tool to tsquare.dev/mcp, the tool sends the wireframes its model writes to our server, which checks and renders them and sends back the image or the problems. As in the playground, the text is handled in memory, not saved, and never written to our logs. Vercel's standard request logs record that a request was made (as above), not its content. The links the server returns are image and share links, described next. What your AI tool keeps is up to that tool and its provider.

Image and share links

An image link such as tsquare.dev/svg/… or tsquare.dev/png/… carries the wireframe inside the link itself. The text is compressed to keep the link short, not encrypted: anyone with the link can turn it back into the text.

When the image is requested, our server reads the wireframe from the link and draws it. We don't store it. Because the text is part of the link, it can appear in our host's request logs, and the drawn image is cached on Vercel's network so it loads quickly. Services where you paste the link, such as Notion or GitHub, may fetch and keep their own copy.

A share link such as tsquare.dev/playground#… carries the wireframe the same way, after the #. Browsers don't send that part of a link to any server, so opening a share link doesn't reach us until the playground draws the wireframe, just as it does when you type one. Like an image link, it's compressed, not encrypted: anyone with the link can read the wireframe.

Fair use

Please don't use the rendering service for unlawful content, or in ways that degrade it for others, such as heavy automated traffic. We may block traffic that does.

No warranty

tsquare and this site are open source under the MIT license and provided as is, without warranty. If you need full control, run tsquare yourself: npx tsquare renders entirely on your own machine.

Questions

Open an issue on GitHub.