← Back to markdown-den

Privacy Policy

Effective date: July 14, 2026

markdown-den ("the Service") is a collaborative markdown editor where people and AI agents edit documents together. This policy explains what information the Service collects, how it is used, and the choices you have.

The Service is operated by Diego Guridi, an individual based in San Francisco, California, USA ("we", "us"). For any privacy question or request, contact dguridi@gmail.com.

Information we collect

  • Account information. When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. If you sign up with email and password instead, we collect your email address. Accounts are managed through our authentication provider (Supabase).
  • Your content. The markdown files, folders, and images you create or upload are stored so the Service can show them back to you and to the collaborators you share them with.
  • Collaboration data. Organization and workspace membership, comments you post, and real-time presence (which file you currently have open) are stored so collaboration works.
  • Technical data. A session token to keep you signed in, and small interface preferences (such as your theme and last-open files) stored in your browser.
  • Working signed out. If you use the Service without an account, your work is stored only in your browser and is never sent to our servers unless you sign in and choose to save it.

We do not use analytics, advertising, or third-party tracking cookies.

How we use your information

We use the information above only to provide and operate the Service: authenticating you, storing and displaying your documents, enabling collaboration and sharing, and communicating with you about your account or requests. We do not sell your personal information and do not use it for advertising.

Google user data

Signing in with Google uses only Google's basic, non-sensitive scopes — email, profile, and openid. We use this data solely to create and secure your account and to show your name and picture to people you collaborate with. We do not request access to Gmail, Drive, Calendar, contacts, or any other sensitive Google data.

Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How your information is shared

  • With collaborators you choose. People you invite to an organization or workspace can see the content, comments, and presence within it.
  • With AI agents you connect. Agents you add act under a key you issue and can access only the workspaces you invite them to. You can revoke an agent's key at any time.
  • Through public links you create. You may choose to make an individual file public. When you do, anyone with the link can read that file without signing in. This only happens when you deliberately create a public link, and you can revoke it.
  • With service providers. We rely on Supabase (database, authentication, file storage), Vercel (hosting), and Google (sign-in) to run the Service. They process data on our behalf.
  • For legal reasons. We may disclose information if required by law or to protect the rights, safety, or security of users or the Service.

Data storage and security

Your account and content are stored with Supabase and served over encrypted connections (HTTPS/TLS). Access is restricted by per-user, per-workspace authorization rules so that only you and the people you share with can reach your content.

Data retention and deletion

We keep your information for as long as your account is active. When your account is deleted, we delete your data, including your documents and uploaded files. To request deletion of your account and data, email dguridi@gmail.com.

Your rights and choices

  • Access and export. You can view your content at any time and download an entire workspace as a .zip from within the app.
  • Correct. You can edit your documents and your profile.
  • Delete. You can delete individual files, folders, and workspaces yourself, and request full account deletion as described above.
  • Revoke agent access. You can revoke any AI agent's connection key.
  • Sign out. You can sign out at any time.

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you rights to know about, access, and delete the personal information we hold, and to not be discriminated against for exercising them. We do not sell personal information. To exercise any right, contact dguridi@gmail.com.

Cookies and local storage

We use only what the Service needs to function: a sign-in session and small interface preferences kept in your browser's local storage. We do not use tracking or advertising cookies.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

International users

The Service is operated from the United States, and your information is stored and processed there. By using the Service you understand your information may be processed in the United States.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above, and for material changes we will provide a more prominent notice.

Contact

Questions or requests about this policy or your data: dguridi@gmail.com.