Privacy Policy
Last updated 25 September 2026
Napkin is a free, noncommercial plugin published by dzhunka. It has no accounts, no sign-in, no cookies, and no analytics. This policy describes the only data that reaches it.
What it receives
Napkin exposes one tool, open_napkin. When your agent calls it, the plugin receives at most one argument: a short brief the agent may write on the napkin as a reminder, such as “rough logo direction”. The plugin has no access to the rest of the conversation, to your files, or to anything else your agent holds.
Your sketch
Your drawing never reaches Napkin. The napkin runs inside a sandboxed frame supplied by your agent host, and when you press Send it hands the image directly to that host, which adds it to your conversation the same way it would a file you attached. From there it is handled under your agent host's own terms, exactly like any other image you share with your agent. Nothing is sent until you press Send.
The napkin on this website works the same way, except that the page itself plays the host: a sketch you send there stays in your browser's memory and is gone when you leave the page.
What it stores
Nothing. The server opens the napkin and keeps no copy of the brief. There is no database, no file store, and no logging of tool payloads in production. Retention is therefore zero: there is nothing to delete, export, or request a copy of.
Hosting
The service runs on Vercel, which processes each request in order to serve it and records ordinary operational request metadata such as IP address, user agent, and timestamp under its own retention defaults. Napkin does not export, analyse, enrich, or retain that data.
Who else sees it
No one. Data is not sold, shared with advertisers, passed to analytics providers, or used to train any model. Vercel, as the hosting provider described above, is the only third party involved.
Your controls
Napkin acts only when your agent calls it, and it holds nothing afterwards. Closing a napkin without pressing Send discards the drawing. Uninstalling the plugin from your agent host stops every call and leaves no residue to erase.
Changes and contact
Material changes to this policy will be published on this page with a new date. Questions go to the public issue tracker.