D2lang.com is the official website for D2, a declarative diagramming language that turns text into diagrams. It's a well-built site with a clean security record, fast load times, and a long history of archived snapshots — all good signs. But for a software tool that offers an online playground and likely collects some form of usage data, the lack of a privacy policy or terms of service is a real gap. Most established software projects, even open-source ones, clearly state how they handle data and who runs the show. Here, there's no about page, no contact information, and no social media links on the homepage. The domain also expires in under two months, which is worth watching. If you're just browsing the documentation or using the local CLI, there's little risk. But if you plan to use the hosted playground or share any personal information, you might want to wait for clearer legal disclosures. d2lang.com reviews from the community are positive, but the site itself doesn't make it easy to verify who's behind it. Overall, it's likely a legitimate project, but with transparency gaps that give us pause.
In plain English
D2lang.com appears to be a legitimate documentation and tool site for the D2 diagramming language. It has a clean security and reputation record, but the missing contact info, legal pages, and the domain's upcoming expiry are reasons to stay cautious — especially if you're thinking of using the online playground or sharing personal data. Treat it as a project you don't fully know who runs yet.
Where the score comes from
The site uses a valid SSL certificate with modern encryption, and Google hasn't flagged it for threats. But it's missing basic browser protections like clickjacking and content security policies, which is a moderate gap for a site that might handle user data through its playground.
The domain is about four years old and registered through Amazon Registrar, which is reputable. But the domain expires in under two months, which is a yellow flag — legitimate projects usually renew well ahead of time. There's no public information about who runs the site.
No blacklist entries, no Google Safe Browsing issues, and a long web archive history stretching back over a decade. That's a strong track record that suggests this domain has been around and stayed out of trouble.
There's no about page, no contact information, and no social media links on the homepage. For a software tool that offers an online playground, this level of anonymity is unusual and makes it hard to know who's behind the project.
A privacy policy and terms of service are missing entirely. For a site that could collect data through its playground or analytics, this is a real gap — especially for visitors in jurisdictions with strict data laws.
Solid technical setup: fast loading, good DNS redundancy, email authentication in place, and hosted on AWS CloudFront. The lack of DNSSEC and security headers keeps it from being excellent, but nothing here is alarming.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →