Privacy policy
Last updated: 23 September 2026
In short: the Terraform you write or import never leaves your browser. There are no accounts, no cookies and no analytics. The hosting provider sees ordinary request data, such as your IP address, to deliver the site, and keeps its logs for at most seven days.
Who this is about
TerraVisual (terravisual.cloudils.com) is a free, open-source learning tool maintained by the owner of the TerraVisual repository on GitHub ("we"). This policy covers the website and the application it serves.
Your Terraform code
- Everything you type, paste or import is parsed, evaluated and drawn inside your browser. It is not uploaded to us or to anyone else.
- This is enforced, not just promised: the page's Content Security Policy only allows it to connect to its own origin, and the application makes no request containing your code.
-
When you import a project, the files are read on your device. Terraform state files
(
.tfstate) and.terraformdirectories are skipped, because they often contain secrets.
What is stored on your device
- Your workspace is saved in your browser's storage (IndexedDB), so it is still there when you come back. It stays on your device and we cannot read it.
- Reset in the application deletes it, and so does clearing this site's data in your browser. In a private window it is gone when the window closes.
- We do not use cookies.
Share links
Copy share link puts your workspace, compressed, inside the link
itself, after the #. Browsers never send that part of an address to a
server, so opening a share link does not send its code to us. But
anyone who has the link can read the code, and wherever you paste it,
such as a chat or an email, may keep a copy. Share only what you would be comfortable
publishing.
What the hosting provider sees
The site is served by Cloudflare (Cloudflare
Workers). Like any website, it receives the ordinary data your browser sends when it
requests a page: your IP address, the address of the file requested
(never the part after #), the time, and standard headers such as your
browser's user agent. Cloudflare may infer an approximate location from the IP address.
- Why: to deliver the site, to keep it secure, and to limit abuse. The site refuses more than 1,000 requests a minute from one IP address, a limit no person reaches.
- Logs: request logs, which include the data above, are kept for up to 7 days to diagnose problems, then deleted automatically. Cloudflare hides cookie and credential headers in them.
- Cloudflare processes this data under its own privacy policy.
We do not combine this data with anything else or use it to identify you.
Analytics and tracking
We use no analytics, advertising or tracking. Cloudflare's network can add its own analytics script to the page; the site's Content Security Policy blocks it from running, so no data is collected through it.
Links to other sites
The details panel links to the official Terraform Registry documentation. Those pages are only loaded if you choose to open them, and they have their own privacy policies.
Browser extensions
Extensions installed in your browser can read any page you open, including this one. No website can prevent that. If your code is sensitive, keep that in mind here as anywhere else.
Children
The site does not knowingly collect personal information from anyone, including children.
Your choices and rights
Your workspace is under your control on your device: delete it with Reset or by clearing site data. We hold no account or profile about you. If you have a question, or a request about the request logs described above, contact us as described below.
Changes
If this policy changes, the new version will be published on this page with a new date. The full history is public in the repository.
Contact
Email info@cloudils.com, or open an issue in the project's issue tracker. To report a security problem privately, use a GitHub security advisory.