Privacy Policy

Last updated: October 1, 2026

Overview

MDReader is a client-side markdown documentation viewer. We are committed to protecting your privacy and being transparent about our data practices.

Data Collection

Files you open in the app are processed entirely in your browser and are never sent to our servers. We store data in two cases only: share links and optional accounts.

Share links (/s/…): files uploaded through the token-protected share API are stored on Cloudflare until the link expires or, for links you chose to keep, until you delete them and are readable by anyone who has the link.

Accounts

Signing in is optional and only needed to manage share links. Accounts are provided by Clerk, which stores your account data (such as email address, name, and sign-in sessions) and sets the cookies needed to keep you signed in.

On our side, an account is linked to:

  • The share links you upload, so you can list, extend, and delete them
  • Your upload tokens: we keep a name, the creation date, the last four characters, and a hash of each token, never the token itself

Deleting a share or revoking a token removes it from our storage; shares are also removed automatically when they expire.

What We Don't Collect

  • Markdown files you open in the browser, or their contents
  • Personal information, unless you create an account
  • Usage analytics or tracking data
  • Cookies for tracking purposes

Google OAuth Integration

MDReader offers an optional Google Docs export feature. When you choose to use this feature:

  • You will be redirected to Google's authentication page
  • We request permission only to create Google Docs documents
  • Your Google access token is stored locally in your browser (localStorage) and is never sent to our servers
  • We do not access your Google account data beyond creating documents you explicitly request

Google API Scopes

We request the following Google API scope:

  • https://www.googleapis.com/auth/documents - To create Google Docs documents

Local Storage

MDReader uses your browser's localStorage to store:

  • Theme preferences (light/dark mode)
  • Google OAuth tokens (if you use the Google Docs export feature)

This data never leaves your device and can be cleared by clearing your browser data.

Third-Party Services

Accounts are handled by Clerk, as described above. MDReader is hosted on Cloudflare Workers. Cloudflare may collect standard server logs (IP addresses, request timestamps) as part of their infrastructure. Please refer to Cloudflare's Privacy Policy for more information.

Children's Privacy

MDReader is not directed at children under 13. We do not knowingly collect any information from children.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date.

Contact

If you have questions about this privacy policy, please contact us at privacy@erk.im.