Privacy Policy
Last updated: 2026-04-16
Who we are
readmd.io ("the Service") is operated as a personal project. We collect the minimum data needed to run the product. This page describes what we collect, why, and your rights.
Data we collect
- Account data: email address and display name (when you sign in).
- Content: the markdown documents you publish. Public / unlisted URLs are served as you configured them.
- Session cookie:
readmd_session(HttpOnly) — identifies your account (linked or unlinked) and grants edit rights. - Billing: Stripe processes payments. We do not store card numbers; only subscription state and the Stripe customer ID.
- Aggregate analytics: Google Analytics 4 (anonymized IP, no advertising signals). In the EU / EEA / UK / Switzerland the analytics cookies are set only after you accept via the consent banner. See Cookie Policy.
- Diagram rendering: when a document contains diagram code blocks (PlantUML, Graphviz, D2, Nomnoml, WaveDrom, etc.), the source code is sent to kroki.io, a third-party rendering service, to produce SVG images. Mermaid diagrams are rendered entirely in your browser and are never sent to an external service.
How we use it
- Serve your documents and their public URLs.
- Send magic-link sign-in emails via Resend.
- Operate subscriptions via Stripe (Pro / Yearly / Lifetime).
- Monitor aggregate usage to improve the product.
Sharing
We do not sell your data. Third parties we share with are processors we depend on: Neon (Postgres), Cloudflare (hosting / CDN), Resend (email), Stripe (payments), Google Analytics 4 (aggregate analytics, IP anonymized), kroki.io (diagram rendering — only when your document contains non-Mermaid diagram blocks).
Your rights (GDPR / CCPA)
You can request export or deletion of your account data by emailing support@readmd.io. We will respond within 30 days.
Retention
- Anonymous documents auto-delete 7 days after creation unless you sign in and claim the workspace.
- Published URLs are permanent for signed-in owners (core product promise).
- Account deletion triggers a 90-day soft delete, then permanent removal.