Privacy
What DataPop collects, what it doesn't, and where it goes.
What stays on your machine
- Data you paste (CSV, TSV, JSON) is parsed inside the Figma plugin. It is never uploaded.
- Your licence key and server URL are kept in the plugin's local storage so you don't retype them.
- Populated layers are written into your Figma file. Nodes carry a small marker — a source reference and a row number — so re-sync can find them again. No cell values are stored there.
What passes through this server
Figma can't fetch arbitrary URLs from a plugin UI, so remote data and images are requested through
datapop.kerdawy.dev. Those requests are streamed: content is relayed to your
Figma client and never written to disk. The application writes no log line for them, and the web server in
front of it records only the path, never the query string — so the URLs of your sheets and images are not retained.
What is stored, if you buy Pro
| Item | Why |
|---|---|
| Your licence key | To recognise your subscription when the plugin checks it. |
| Your email address | Provided by the payment processor, so we can reach you about the subscription. |
| Payment processor customer and subscription IDs, status, renewal date | To know whether the subscription is active. |
| Date of the most recent licence check | Support — to tell whether a key is actually in use. |
Free users are not registered at all: nothing is stored about them.
Payments
Payments are handled by Polar, who act as the merchant of record and appear on your card statement. Card details are entered on their systems and are never seen by, or sent to, this server. Their handling of that data is governed by their own privacy policy.
Third parties your data may reach
- Google, if you load a Google Sheet URL.
- Whatever hosts appear in your own data, when images or JSON are fetched from them.
- Polar, for payment and subscription management.
There is no analytics, tracking or telemetry of any kind in the plugin or on this server.
Deleting your data
Cancel from the billing portal, then email abdelrahman@kerdawy.dev and the licence record will be removed. Removing the plugin clears everything held locally.