Privacy Policy

Last updated: October 13, 2026

This site runs Raya, an open-source collaborative document editor (source code). It is a small, privately run service. This policy explains what information the site collects when you use it and what happens to it. "We" means the person who runs this site.

What we collect

From Google when you sign in. You sign in with your Google account. Google tells us:

your Google account ID, which is how we recognise you;
your name;
your email address, but only if Google has verified it;
a link to your Google profile picture.

We never see your Google password and get no other access to your Google account.

What you create. We store:

the documents you create and edit, including their names and formatting;
who owns each document and who it's shared with;
when each document was last edited;
recent individual edits, which are kept only until everyone who has the document open has received them, then deleted.

Server logs. Like most websites, the server records basic information about each request, such as your IP address, the page requested and the time. These logs are used to keep the site running and to investigate problems.

How we use it

Only to run Raya:

to sign you in and keep you signed in;
to show you your documents;
to sync edits between everyone working on the same document;
to let document owners share documents with other people by email.

We don't show ads, don't use analytics or tracking tools, and never sell your information.

Who can see your information

People you share documents with. Anyone added to a document can read and edit it. They see the owner's name, and the names and email addresses of everyone the document is shared with. While you have a document open, the others who have it open at the same time see your name and profile picture.
Google. The sign-in button and the site's font are loaded from Google, so Google receives your IP address and basic browser information when you visit. Google's handling of that is covered by Google's Privacy Policy.
The hosting provider that runs the server stores the data on our behalf.
Where required by law. We would disclose information if legally required to.

Cookies

We only use cookies needed for the site to work:

user_id: keeps you signed in. It holds a signed token, not your Google details, and expires after 7 days.
user_name and user_pic: your name and profile picture link, to show who's signed in. They expire after 7 days.

Google's sign-in also sets its own cookies, such as g_csrf_token, to protect the sign-in. Signing out removes our cookies.

How long we keep it

Your account and documents are kept until you ask us to delete them. Recent individual edits are removed automatically once they're no longer needed for syncing. Server logs are kept only for a limited time.

Your choices

You can delete documents you own at any time from your documents page. Deleting a document removes it for everyone it's shared with, and it can't be recovered.

You can also ask us to show you the information we hold about you, correct it, or delete your account. Deleting your account deletes the documents you own, including for the people you shared them with, and removes you from documents other people shared with you. The app doesn't have an account delete option yet, so contact us using the details below.

Security

Sign-in tokens are signed so they can't be forged, and only the owner and collaborators of a document can open it. This is a small service run by an individual, so no system is perfectly secure; please don't use it for highly sensitive information.

Children

Raya isn't intended for children under 13, or the minimum age required to have a Google account where you live.

Changes

If this policy changes, the new version will be posted here with a new "Last updated" date.

Contact

For questions or requests about your information, email rishikaley+raya-editor@gmail.com.

See also: Privacy Policy · Terms of Service