SVG to Onshape
Add

Privacy

Last updated: 26 May 2026

SVG to Onshape is a free, open-source add-in. It runs as an iframe panel inside an Onshape Part Studio and as a backend deployed on Vercel. This page describes what data flows through it and where it is stored.

What we collect

  • Your Onshape user ID — supplied by Onshape when you open the panel. Used as the key for your OAuth token.
  • An Onshape OAuth access & refresh token — issued by Onshape after you click Sign in via OAuth. Stored in Vercel KV (Upstash Redis). The token lets the backend call the Onshape REST API on your behalf to create theSVG to Sketch feature in your active Part Studio.
  • The document context you have open (documentId, workspaceId, elementId) — passed in the iframe URL by Onshape and only used at request time to target the correct Part Studio. Not stored.
  • The SVG you upload — read, optimized (SVGO), and converted into curves entirely in your browser, then sent to Onshape as feature parameters. The file is never uploaded to our servers and is not stored on our side.

What we do not collect

  • No third-party trackers, no advertising cookies, no cross-site fingerprinting.
  • No content of your documents beyond what you explicitly insert.
  • No marketing emails — we don't collect your email at all.

Analytics

We use Vercel Web Analytics to count page views and see which browsers/countries our visitors come from. It is cookieless— it stores nothing in your browser, doesn't use localStorage, and doesn't track individuals across sites. IP addresses are anonymized server-side. We never see who you are, only aggregate counts. Details: Vercel Analytics privacy policy.

Cookies

The only cookie this site sets is a signed, httpOnly session cookie used to hold the OAuth state during the Onshape sign-in handshake. No analytics or advertising cookies.

Third parties

  • Onshape — REST API calls when you insert a feature.
  • Vercel & Upstash — host the app and store OAuth tokens. Vercel also collects the cookieless analytics described below.

Retention & deletion

OAuth tokens live in Vercel KV until you uninstall the app from Onshape (which revokes the token) or until you ask for deletion. To request manual deletion, open an issue at github.com/xfanta/onshape-svg/issues.

Contact

Questions or concerns: open an issue or discussion on GitHub.