Last updated 2 August 2026
Your drawings, characteristics, operations, control plans and inspection records never leave your computer. We could not produce them if asked, because we do not have them.
What we hold is the minimum needed to run an account: your email address, your shop name, your settings and library, and your subscription state.
ctrlPlanner does the calculation and rendering in your browser. Plan content is written to files on your own drive in the open ".cplan.zip" format and to your browser's local storage. There is no upload step and no server-side copy. The design is what enforces this, not a policy we could quietly change.
This is the reason ctrlPlanner does not widen the assessment boundary of a shop already operating inside CMMC or ITAR scope: controlled technical data stays on equipment you already control.
We use browser storage to keep you signed in and to hold your license status and your working plan. These are functional and there is no advertising or analytics cookie to consent to.
The demo runs in your browser with no account, on one sample part that belongs to nobody. It is the only part of ctrlPlanner that records anything about what a visitor does, and this is the whole of it: that a demo was opened, which of the two starting points was used, whether a plan was created, whether the setup wizard was finished, and whether an export was produced.
Each of those is a fixed event name chosen from a published list in our source code. The server rejects any name that is not on that list, so no part number, dimension, tolerance, filename, drawing or anything else you type can be recorded, whether by accident or otherwise. We do not record your IP address, your browser, the page you arrived from, or the address of the page you are on.
There is no cookie and nothing is written to your browser's storage for this. Events are labeled with a random number created when the page loads and discarded when you close the tab, so two visits from the same computer cannot be connected to each other or to you. If your browser sends Do Not Track or Global Privacy Control, nothing is sent at all.
Signing in leaves the demo behind. From that point the product records none of this.
Each is a processor acting on our instructions. None of them receives plan content, because we do not have it to pass on.
Account and settings data is kept while your account exists and for a reasonable period afterwards for tax and accounting purposes. Ask us to delete your account and we will remove your account record and settings; billing records that we are legally required to retain are the exception.
Depending on where you are, you may have rights to access, correct, export or delete the personal data we hold, and to object to or restrict its processing. Write to us and we will action it. Because plan content is already on your own equipment in an open format, an export of it is something you can perform yourself at any time without asking.
ctrlPlanner is business software and is not directed at anyone under 18.
If we change what we collect, we will update this page and email account holders before the change takes effect.
Privacy questions, or a request about your data: support@ctrlplanner.com.