Privacy

The short version

Publishing a document stores the document. Nothing else about you is collected, and nothing is sold or shared.

What is stored when you publish

• The Markdown you submitted.
• A random public identifier and the digest of your delete token. The token itself is never stored, which is why it cannot be recovered.
• The publication date, an expiry date if you chose one, and a view count.

Documents are public. Anyone with the link can read them.

What is stored if you create an account

• Your email address and a hashed password. The password is hashed with bcrypt and is never stored or recoverable in plain text.
• Sign-in dates and IP addresses, kept to investigate abuse.
• The link between your account and the documents you published.

Your email address is used only to confirm your account and to reset your password. It is never used for marketing and never shared.

Cookies

One session cookie, needed to keep you signed in and to protect forms against cross-site request forgery. No advertising or tracking cookies. Audience measurement runs without any cookie at all, see below.

Audience measurement

Visits are counted by Matomo, hosted on our own servers. It runs in fully cookieless mode: no _pk_* cookie is written, nothing is stored in your browser, and you are not followed from one site to another. What is recorded is the page visited, the approximate time spent, and the usual technical data a web server sees anyway, such as an anonymised address, the referring page, the browser and the screen size. That data stays on our infrastructure, is never sold, and is never shared with an advertising network. No consent banner is needed precisely because there is no cookie to consent to.

Cloudflare Turnstile

Publishing and account forms are protected by Cloudflare Turnstile, which checks that a request comes from a person rather than a bot. Cloudflare receives technical data about the request for that purpose. Turnstile is designed for privacy and does not track people across sites.

Retention

Documents are kept until you delete them, or until their expiry if you set one. Deleting a document removes it permanently. Deleting your account leaves your published documents in place, unattached to any account; delete them first if you want them gone.

Your rights

You can access, correct or delete your data at any time. For anything the interface does not cover, use the contact address in the legal notice.