1. Introduction
Welcome to wireframingtools.org. We are an independent editorial website that publishes hands-on reviews, comparisons, guides, and examples of wireframing and UX design tools. Our site is operated as a sole proprietorship and content publication; we are not a software company, SaaS platform, or data broker.
This Privacy Policy describes how wireframingtools.org ("we," "us," "our," or "the Site") collects, uses, stores, and discloses information about visitors and subscribers ("you" or "your") when you access our website at https://wireframingtools.org and any subpages or subdomains thereof.
By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the site. We encourage you to review this policy periodically, as we may update it from time to time. The "Last Updated" date at the top of this page reflects the most recent revision.
This policy is effective as of June 1, 2026. If you have questions about any part of this policy, please contact us at [email protected].
Our Core Privacy Commitment
We do not sell your personal data. We do not build advertising profiles on you. We collect only the minimum data necessary to operate the site, deliver our newsletter, and understand how our content is performing so we can improve it.
2. Information We Collect
We collect information in three ways: directly from you when you voluntarily provide it, automatically when you browse our site, and indirectly through third-party affiliate networks when you click on outbound tool links.
(a) Information You Provide Directly
The only form of voluntary data collection on wireframingtools.org is our email newsletter sign-up. If you choose to subscribe to our newsletter, we collect:
- Email address — used to deliver the newsletter to you. This is the only required field.
- First name (optional) — used to personalize newsletter greetings if you provide it.
We do not have user accounts, logins, comments sections, contact forms (beyond email), checkout processes, or any other mechanism that would prompt you to enter personal data. We do not accept guest posts, so there is no author submission form.
(b) Information Collected Automatically
Like virtually every website on the internet, wireframingtools.org automatically collects certain technical and behavioral data when you visit. This is primarily done via Google Analytics 4 (GA4), which we use to understand how our content is used so we can improve it. The data collected automatically includes:
- IP address — your Internet Protocol address is transmitted to Google Analytics when you load a page. GA4 anonymizes IP addresses by default; we do not store full IP addresses on our own servers.
- Browser type and version — e.g., Chrome 124, Safari 17.
- Operating system — e.g., Windows 11, macOS Sonoma, iOS 17.
- Device type — desktop, mobile, or tablet.
- Geographic location — at city or country level, derived from your anonymized IP address.
- Pages visited — the specific URLs you visit on wireframingtools.org, and the order in which you visit them.
- Referrer URL — the website or search engine you came from before arriving at our site.
- Session duration and engagement — how long you spend on each page, scroll depth, and whether you clicked any links.
- Search terms (internal) — if our site has an internal search function and you use it, those search queries may be captured.
This data is processed and stored by Google on our behalf under a Data Processing Agreement that complies with GDPR requirements. We review aggregate analytics reports; we do not analyze individual user browsing sessions.
(c) Affiliate Tracking Cookies
wireframingtools.org participates in affiliate programs operated by wireframing and design tool companies. When you click a link to one of these tools from our site, the partner website may set a first-party cookie in your browser on their domain. This cookie records that you arrived from wireframingtools.org, so that if you purchase a subscription or paid plan, we receive a small referral commission.
These affiliate cookies are set by the partner's website, not by wireframingtools.org. They do not transmit your personal data to us; we receive only aggregate commission reports from affiliate networks (e.g., "5 sign-ups from wireframingtools.org this month"). We cannot read the contents of cookies set by third-party domains.
Common affiliate partners whose tracking cookies may be set include (but are not limited to): Figma, Miro, Balsamiq, Sketch, Adobe, Axure, Whimsical, Lucidchart, and other wireframing tool providers. This list may change as we add or remove affiliate partnerships.
3. How We Use Your Information
We use the data we collect for the following purposes only:
| Data Type | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Email address | Delivering the newsletter you subscribed to; sending occasional editorial updates | Consent (Art. 6(1)(a)) |
| Analytics data (GA4) | Understanding which pages are popular, where traffic comes from, how content can be improved | Legitimate interests (Art. 6(1)(f)) |
| Anonymized IP address | Geographic analytics, spam/abuse prevention | Legitimate interests (Art. 6(1)(f)) |
| Affiliate click data | Tracking commissions earned from referrals; verifying affiliate partner payments | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, targeted advertising, or any purpose beyond what is listed above. We do not use your data to build segments or audiences for resale to data brokers or advertisers.
No Advertising
wireframingtools.org does not run display advertising (no Google AdSense, no programmatic ads). Our revenue comes from affiliate commissions earned when readers click through to paid tools and subscribe. This means we have no incentive to track you for advertising purposes.
5. Google Analytics
wireframingtools.org uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (and, for users in the EU/EEA, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics collects data about how visitors use our website and compiles it into reports that help us understand our audience and improve our content. GA4 uses cookies and similar tracking technologies as described in Section 4.
Data Collected by Google Analytics on Our Behalf
- Anonymized IP address and derived geographic location (city, country)
- Browser, device, and operating system information
- Pages visited, time spent, scroll depth, and click events
- Traffic sources (organic search, direct, referral, social)
- Search keywords that led to our site (from Google Search Console integration)
- Engagement events such as outbound link clicks
Data Retention
In our Google Analytics account, we have configured user-level data retention to 14 months, after which individual event data is automatically deleted by Google. Aggregated, anonymized reports may persist indefinitely as they contain no personal data. You can find Google's own data retention policies in the Google Analytics Help Center.
Data Processing Agreement
We have signed Google's Data Processing Amendment, which establishes Google as a data processor acting on our behalf and commits Google to processing data only for the purposes we define, in compliance with applicable data protection laws including GDPR.
Opting Out
To opt out of being tracked by Google Analytics across all websites, install the official Google Analytics Opt-out Browser Add-on. For Google's own privacy practices, see the Google Privacy Policy.
IP Anonymization
We have enabled IP anonymization in our Google Analytics configuration. This means the last octet of IPv4 addresses and the last 80 bits of IPv6 addresses are set to zero before any data is stored or processed by Google. We never see or store your full IP address.
6. Affiliate Tracking
wireframingtools.org participates in affiliate marketing programs. This means we earn a commission when readers click through to a tool we recommend and purchase a paid plan. This affiliate income is how we fund our editorial team and keep the site running without displaying intrusive advertising.
Our affiliate relationships do not influence our editorial ratings or rankings. All tool scores are based on our independent testing criteria, which are published on our Methodology page. We disclose our affiliate relationships on every page that contains affiliate links, as required by the FTC and relevant advertising guidelines.
How Affiliate Tracking Works
When you click a link to a tool on wireframingtools.org (e.g., a "Try Figma Free" button), the link contains a tracking parameter or redirect URL that identifies wireframingtools.org as the referral source. When your browser follows that link to the tool's website, the tool's server may set a first-party cookie on the tool's domain with an expiry window (typically 30–90 days, depending on the partner).
If you purchase a paid plan on that tool's website within the cookie window, the affiliate network credits wireframingtools.org with a commission. This commission is calculated automatically by the affiliate network; we do not receive any personal data about you as part of this process — only aggregate reports such as "3 conversions this week."
Affiliate Partners
We may have affiliate relationships with some or all of the following companies. This list is representative, not exhaustive, and may change as we add or end partnerships:
- Figma — design and wireframing platform
- Miro — online whiteboard and collaboration tool
- Balsamiq — low-fidelity wireframing tool
- Sketch — macOS design tool
- Adobe XD / Adobe Creative Cloud — Adobe's design suite
- Axure RP — prototyping and wireframing software
- Whimsical — flowcharts, wireframes, and diagrams
- Lucidchart / Lucidspark — diagramming and whiteboard platform
- UXPin — design system and prototyping tool
- Zeplin — design handoff and collaboration
- Affiliate networks such as ShareASale, Impact, PartnerStack, and Refersion
Each affiliate partner has its own privacy policy governing how they use tracking cookies and conversion data. We encourage you to review the privacy policy of any tool you visit.
Affiliate Disclosure
Some links on wireframingtools.org are affiliate links. If you click one and make a purchase, we earn a commission at no extra cost to you. Our editorial opinions are independent of any affiliate relationships. See our full Editorial Policy and Affiliate Disclosure.
7. Data Sharing and Disclosure
We Do Not Sell Your Data
wireframingtools.org does not sell, rent, license, or trade your personal information to any third party for their own marketing or commercial purposes. This applies to all data categories we collect, including email addresses and analytics data.
We share data only in the following limited circumstances:
Service Providers (Data Processors)
We work with a small number of trusted service providers who process data on our behalf. These providers are bound by data processing agreements and are not permitted to use your data for their own purposes:
- Email marketing platform — We use a third-party email service provider to store our subscriber list and send newsletters. Your email address is stored on this provider's servers. We have chosen a provider that complies with GDPR and offers robust security. (Current provider: disclosed upon request to [email protected].)
- Google LLC (Analytics) — As described in Section 5, Google processes anonymized analytics data on our behalf under a Data Processing Agreement.
- Web hosting / CDN provider — Our hosting provider may process request logs that include IP addresses for security and uptime purposes. These logs are retained for no more than 30 days.
Legal Requirements
We may disclose your information if required by law, regulation, court order, or governmental authority. We will provide notice to affected individuals where legally permitted before making such a disclosure, unless prohibited from doing so.
Business Transfers
In the unlikely event that wireframingtools.org is sold, merged, or transferred to a new owner, your data (including subscriber email addresses) may be transferred as part of that transaction. We will notify subscribers by email and update this Privacy Policy before any such transfer takes place. The new owner would be bound by the privacy commitments made in this policy at the time of transfer.
Aggregate and Anonymized Data
We may share aggregated, de-identified statistics about our site's traffic and audience (e.g., "wireframingtools.org receives X monthly visitors from the United States") publicly or with advertising partners for promotional purposes. This data contains no personally identifiable information.
8. Your Privacy Rights
Depending on where you live, you may have specific legal rights regarding your personal data. We honor these rights for all users globally, regardless of jurisdiction, because we believe privacy is a universal right, not just a legal requirement.
Right of Access
Request a copy of the personal data we hold about you.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Correction
Request correction of inaccurate or incomplete personal data.
Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests.
Restrict Processing
Request we limit how we use your data in certain circumstances.
How to Exercise Your Rights
To exercise any of these rights, please email us at [email protected] with the subject line "Privacy Rights Request". Please include:
- Your full name (if provided to us previously)
- Your email address (so we can locate your data)
- The specific right you wish to exercise
- Any relevant details to help us identify your data
We will acknowledge your request within 5 business days and complete the request within 30 calendar days. In complex cases we may extend this by an additional 30 days, in which case we will notify you of the extension and the reason. We will not charge a fee for routine requests, but may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
We may need to verify your identity before fulfilling your request to prevent unauthorized access to another person's data. Verification typically involves confirming your email address.
10. Children's Privacy
wireframingtools.org is not directed at, nor intended for, children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will take prompt steps to delete that information from our systems.
Our content covers professional UX design tools, methodologies, and workflows that are oriented toward working professionals, students in tertiary education, and adult learners. The site is not designed to attract or be of primary interest to children.
For users between the ages of 13 and 18, we recommend that a parent or guardian review this Privacy Policy together with you. If you are under 18, please do not submit personal data to us without parental consent.
COPPA Notice
This site is not covered by the Children's Online Privacy Protection Act (COPPA) in its primary use case, as it is directed at adults. However, we comply with COPPA obligations by not knowingly collecting data from users under 13. If we learn that we have inadvertently collected such data, we will delete it immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will:
- Update the "Last Updated" date at the top of this page.
- For material changes that significantly affect how we use personal data, send an email notification to newsletter subscribers at least 14 days before the changes take effect.
- For minor changes (clarifications, corrections, updated third-party partner lists), update the policy without prior notice, though the "Last Updated" date will always reflect the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of wireframingtools.org after the effective date of any revised policy constitutes your acceptance of the revised policy.
Previous versions of this Privacy Policy are not publicly archived. If you need a copy of a prior version for legal purposes, please contact us and we will make reasonable efforts to provide it.
Version History
| Version | Date | Summary of Changes |
|---|---|---|
| 1.0 | June 1, 2026 | Initial publication. Full GDPR and CCPA compliance sections added. |
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact our privacy team:
- Email: [email protected]
- Website: https://wireframingtools.org
- Response time: We aim to respond to all privacy-related inquiries within 5 business days.
For newsletter-related issues (subscribe/unsubscribe, content feedback), you can also reply directly to any newsletter email you have received from us.
For GDPR-related requests from EU/EEA residents, or CCPA requests from California residents, please use the subject lines specified in Sections 14 and 13 respectively to ensure prompt routing to the appropriate process.
Privacy Questions?
We take privacy seriously and respond to every inquiry personally. No automated bots — a real person reads every privacy email.
[email protected]13. California Privacy Rights (CCPA / CPRA)
If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section describes those rights and how you can exercise them.
Categories of Personal Information Collected
In the past 12 months, wireframingtools.org has collected the following categories of personal information from California consumers:
| Category | Examples | Collected? | Source |
|---|---|---|---|
| Identifiers | Email address, anonymized IP address | Yes | Newsletter form; Google Analytics |
| Internet / electronic network activity | Pages visited, session data, referrer URLs | Yes | Google Analytics |
| Geolocation data | City-level location derived from IP | Yes (approximate) | Google Analytics |
| Sensitive personal information | N/A | No | — |
| Financial information | N/A | No | — |
Your California Rights
As a California consumer, you have the right to:
- Know what categories and specific pieces of personal information we have collected about you, and the purposes for which it is used.
- Delete personal information we have collected, subject to certain exceptions (e.g., we may retain data we are legally required to keep).
- Correct inaccurate personal information we hold about you.
- Opt out of the sale or sharing of your personal information — though we do not sell or share personal information for cross-context behavioral advertising, so this right is not practically applicable to our site.
- Limit the use of sensitive personal information — we do not collect sensitive personal information as defined by CPRA.
- Non-discrimination — we will not discriminate against you (deny services, charge different prices, provide lower quality) for exercising your CCPA/CPRA rights.
How to Submit a California Privacy Request
To submit a verifiable consumer request under CCPA/CPRA, email [email protected] with the subject line "California Privacy Rights Request". Please include your email address and specify which right(s) you wish to exercise. We will verify your identity and respond within 45 calendar days (extendable by an additional 45 days with notice).
You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide written permission signed by you, and we may still contact you directly to verify your identity.
No Sale of Personal Data
wireframingtools.org does not sell personal information as defined under CCPA/CPRA. We do not sell, rent, release, disclose, disseminate, transfer, or otherwise communicate California consumers' personal information for monetary or other valuable consideration.
14. EU/EEA Residents — GDPR Rights
If you are located in the European Union, European Economic Area, or the United Kingdom, the General Data Protection Regulation (GDPR) (EU) 2016/679 — and, for UK residents, the UK GDPR — grants you enhanced rights over your personal data. This section provides specific information relevant to GDPR compliance.
Data Controller
For the purposes of GDPR, the data controller for wireframingtools.org is the site operator, reachable at [email protected]. As an independent editorial website without an EU establishment, we are a data controller based outside the EU. We process data in compliance with GDPR obligations applicable to controllers established outside the EU who offer services to EU residents.
Legal Bases for Processing
We process personal data under the following legal bases, as described in Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): Newsletter subscription — we process your email address only on the basis of your freely given, specific, informed, and unambiguous consent. You can withdraw consent at any time by unsubscribing.
- Legitimate interests (Art. 6(1)(f)): We use Google Analytics for website analytics because we have a legitimate interest in understanding how our content is used to improve it. We have assessed that this interest is not overridden by your rights and interests, given the limited nature of the data collected and the anonymization measures in place.
- Legal obligation (Art. 6(1)(c)): We may process data where required by law (e.g., responding to legal requests).
International Data Transfers
We use Google Analytics, which may transfer data to Google servers in the United States. Google LLC participates in the EU-US Data Privacy Framework (DPF), which provides an adequate level of protection for personal data transferred from the EU to the US, as determined by the European Commission. For UK residents, Google relies on the International Data Transfer Agreement (IDTA) and Standard Contractual Clauses.
Our email marketing provider similarly operates within the GDPR-compliant data transfer framework using Standard Contractual Clauses (SCCs) where applicable.
Your GDPR Rights in Detail
Under GDPR, EU/EEA residents have the following rights:
- Right of access (Art. 15): Obtain confirmation of whether we process your data, and receive a copy of it along with supplementary information.
- Right to rectification (Art. 16): Have inaccurate personal data corrected without undue delay.
- Right to erasure (Art. 17): Have your data deleted ("right to be forgotten") where certain conditions apply, including where consent is withdrawn and no other legal basis applies.
- Right to restriction of processing (Art. 18): Restrict our processing of your data in certain circumstances (e.g., while accuracy is disputed).
- Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format (e.g., CSV) and transmit it to another controller where processing is based on consent.
- Right to object (Art. 21): Object to processing based on our legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds.
- Right to withdraw consent (Art. 7(3)): Withdraw consent for newsletter subscription at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe we have not handled your personal data in compliance with GDPR, you have the right to lodge a complaint with your local supervisory authority. You can find a list of EU data protection authorities at https://edpb.europa.eu. For UK residents, the relevant authority is the Information Commissioner's Office (ICO).
We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority. Please contact us first at [email protected].
GDPR Requests
To exercise any GDPR right, email [email protected] with the subject line "GDPR Rights Request" and specify the right(s) you want to exercise. We will respond within 30 days. No fee is charged for reasonable requests.
Frequently Asked Questions About Our Privacy Practices
No. We do not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only with our service providers (email delivery platform and Google Analytics) strictly to operate the site and deliver the newsletter. This commitment applies regardless of what laws may or may not require — it is simply our policy.
We collect your email address only if you voluntarily sign up for our newsletter. We also automatically collect anonymized usage data via Google Analytics 4 — including approximate location, browser type, pages visited, and session duration. If you click an affiliate link, a tracking cookie from the partner tool may be set on their domain. That cookie is theirs, not ours. We never see your credit card details, name (unless you give it for newsletter personalization), or any other sensitive personal information.
Every newsletter email includes a clearly visible one-click unsubscribe link at the bottom. Clicking it removes you from the list immediately. You can also email [email protected] to request removal. We will delete your address from our list within 30 days of your request.
Install the official Google Analytics Opt-out Browser Add-on from Google. This prevents Google Analytics from collecting data about your visits across all websites that use it, including ours. You can also browse in private/incognito mode, or use a browser extension like uBlock Origin that blocks Google Analytics scripts by default.
Email [email protected] with the subject line "Privacy Rights Request" (or "GDPR Rights Request" / "California Privacy Rights Request" for jurisdiction-specific requests). Include your email address and the specific right you want to exercise. We will acknowledge within 5 business days and complete the request within 30 days (GDPR) or 45 days (CCPA).
When you click a link to a tool on our site, the tool's website may set a small cookie in your browser on their own domain to record that you came from wireframingtools.org. If you purchase within the cookie window, we earn a small commission. These cookies do not identify you personally to us — we only receive aggregate commission reports. The cookies are limited to the tool's website domain and do not track you across unrelated sites. If you'd prefer not to have these cookies set, you can use your browser's cookie blocking settings or private mode before visiting a tool's website.