DotMD
Privacy Policy
Effective: October 19, 2026
DotMD has no accounts, doesn't collect your documents and doesn't track you. This page lists everything that does leave your Mac, why, where it goes and for how long.
1. In short
- Your files, comments, versions and settings stay on your Mac. We can't see them.
- If you buy DotMD Pro, a purchase record is kept under a random ID, without your name.
- Apple or Paddle take the payment under their own policies; Paddle also knows your email for the receipt.
- AI actions send text only to the provider you set up with your own key, never to us.
- DotMD sends usage statistics that are not tied to you or your account (which features are used, never your files or text); you can turn them off in Settings. No advertising, no selling of data.
2. Who is responsible
The data controller is Oleksandr Storozhenko, the publisher of DotMD: support@getdotmd.com.
3. Your files stay on your Mac
The Markdown files you open, your edits, comments and reviews, version history, the search index and your settings are stored on your Mac only. DotMD's MCP server runs on your Mac and accepts connections only from programs on the same Mac; nothing goes through our servers. An API key you add for AI actions is kept in your macOS Keychain.
4. What leaves your Mac, and why
| When | What | To whom | Why, and for how long |
|---|---|---|---|
| Buying or using DotMD Pro | A random purchase ID (dotmd_…); the plan, store, dates, price,
country and currency; DotMD's and macOS's version | RevenueCat (USA), our purchase service | To know which Macs have Pro and to handle renewals and refunds (performance of the contract). Kept while the licence is valid and as long as tax law requires, then deleted. |
| Paying in the App Store | Your payment, under Apple's policy | Apple | Apple takes the payment. We don't receive your name, email or payment details. |
| Paying on getdotmd.com | Email address, billing country, payment details; Paddle may set its own cookies on the checkout page to prevent fraud | Paddle (UK/USA), our reseller | Paddle takes the payment and issues the invoice. We see your email, your order and its country in Paddle and use them for receipts, refunds and support (performance of the contract). Kept as long as tax law requires invoices to be kept. |
| Counting our sales | From Paddle, for each order: its number, Paddle's customer and subscription numbers, the plan, amounts, discounts, tax, fees and payouts, billing country, status and dates; for each refund or chargeback: its amounts, kind and dates; never your email, name or address. From Apple: daily and monthly totals per country and plan, with subscription counts, trial starts and cancellations, without buyers. From RevenueCat: project-wide totals only (revenue, active subscriptions, trials) | Us, in our statistics database at Cloudflare | To see sales, renewals and refunds of both stores in one place (legitimate interest). Kept as long as tax law requires invoices to be kept, then deleted. |
| Running DotMD on several Macs | The purchase ID, in your iCloud key-value storage | Apple (iCloud) | So your other Macs share the purchase. Apple syncs it inside your account; we never see your iCloud account. |
| Using an AI action with your key | The selected text or the document | The provider you chose: OpenAI, Anthropic, Google, DeepSeek or xAI | Sent straight from your Mac under the provider's policy, only when you run an action (your choice). With Apple Intelligence, nothing leaves the Mac. |
| Checking for updates | DotMD's version, in a request to getdotmd.com (direct version) or Apple's iTunes Search API (App Store version); your IP address is visible to the server as with any request | Cloudflare (our host) or Apple | Once a day, to tell you about a new version (legitimate interest). Not stored by us. |
| Using DotMD, unless you turn it off | Usage events: which features and agent tools are used and which agent program calls them (Claude Code, Codex, Cursor, Visual Studio Code or another), how reviews end, how the purchase screen closes, errors shown; DotMD's and macOS's version, the system language, and whether it is the App Store or the direct version; a random install ID made on your Mac (DotMD shows it in Settings as “Support ID”), not linked to your purchase or your Apple Account. The App Store version also sends Apple's signed proof that it is a genuine copy; our server checks it and does not store it. Never your files, their names or text, your comments or what agents send. | Us, on Cloudflare | To learn which features people use and where they get stuck (legitimate interest). We keep the events for 14 months; an install record (the install ID, country, versions, language, App Store or direct, first and last contact) until 14 months after the last contact; and a request log for 30 days (time, the address called and the result, country, the network operator, a daily code derived from your IP address, the install ID and app version, and for registration and settings requests, and for requests that are refused, the browser or app identification string). The IP address itself is never stored, and the daily code changes every day. From the events and the request log we also make anonymous daily totals: counts per day of active and new Macs, by country, DotMD version, macOS version, language, App Store or direct, and whether the purchase was verified; of how many times each kind of event happened (such as a folder opened or a review requested), some with one detail such as the agent app or the result; and of requests to our server, with errors and response times. A value that fewer than 3 Macs had on a day is grouped as "other" (fewer than 3 verified purchases count as not verified). They are not tied to an install ID or to you, and we keep them indefinitely to see long-term trends (legitimate interest). Turn it off in DotMD → Settings → General → "Share anonymous usage data"; DotMD then sends nothing and deletes what was waiting. |
| A document with formulas or diagrams | A request for the KaTeX or Mermaid library; your IP address is visible to the network, your document is not sent | jsDelivr | To render math and diagrams. Not stored by us. |
| Writing to support | Your email and what you wrote | Us | To answer you. Kept up to two years, so we can follow up, then deleted. |
5. Usage statistics, crash reports and diagnostics
DotMD's own usage statistics are the ones described above: not tied to you or your account, on by default, off with one switch in Settings → General. To have the statistics of your Mac deleted, write to support@getdotmd.com with the Support ID shown in Settings → General; it is the only key to them. DotMD has no crash reporting of its own. The App Store version's crash reports reach us only if you share analytics with app developers in macOS Settings, and then only as Apple makes them available: anonymised, without your documents. The direct version sends no crash reports.
6. The website
getdotmd.com is hosted by Cloudflare, which processes requests to serve the pages. The site counts its own visits, without cookies: for each page it records the page, its language, your country, the kind of device, the browser and the operating system (their names, not versions), the site you came from (its name only) and the campaign label in the link, if there is one. Taps on the download and App Store buttons are counted the same way, along with whether the link came from a Google ad (a yes or no, not the ad's identifier). Your IP address and your browser's identification are not stored: to tell visitors apart within a day, they are combined with the date and a secret key into a code that is stored with each record. The code can't be turned back, and tomorrow you get a different one. These records are kept for 13 months, to see which pages and campaigns bring people to DotMD (legitimate interest).
If you arrive from one of our Google ads, or come back after arriving from one (Google's cookie remembers it), the page can load Google's conversion tag. In the EU, the EEA, the UK and Switzerland the page asks first, in a banner at the bottom of the window, and the tag loads only after you press Accept: until then, and if you press Decline, nothing from Google loads. In the other countries where we advertise, the United States and Canada, it loads without asking. It never loads, and the banner is not shown, if your browser sends Do Not Track or Global Privacy Control. Loading the tag sends Google the page request, with your IP address and browser identification, as any request to a website does; Google sets a cookie on getdotmd.com that remembers the ad click for up to 90 days, and when you tap a download button, the tag tells Google that the ad led to the tap. It runs without ad personalisation and with restricted data processing, under Google's privacy policy. Where the banner asks, the legal basis is your consent; elsewhere, our legitimate interest in knowing which ads bring people to DotMD.
To change your choice, press “Cookie choice” at the bottom of any page of the site (it appears once you have chosen). After Decline the tag no longer loads, and the site deletes Google's cookie on getdotmd.com. Your choice is kept for 6 months only in your browser (its local storage) and is not sent to us or to Google; after that, or on your next visit if your browser doesn't keep it, the banner asks again. The site sets no cookies of its own. The checkout page embeds Paddle's payment form, described above.
7. Where data goes, and how it is protected
RevenueCat, Paddle, Apple, Cloudflare, Google and jsDelivr may process data outside your country, including in the United States. Each is bound by its own privacy terms and, where EU or UK law applies, by standard contractual clauses or an equivalent transfer mechanism. All connections from DotMD and from this site are encrypted (HTTPS); purchase records carry no name or email; access to the dashboards is limited to us.
8. Your rights
You can ask us what we hold about a purchase, have it corrected, exported or deleted, or object to a use of it. Write to support@getdotmd.com with your Paddle order number or App Store receipt, so we can find the record: without a name on it, that is the only way. Deleting the purchase record ends the Pro licence it carries. We answer within a month. If you are in the EU, the UK or another region with data-protection law, you also have the right to complain to your local authority. We don't sell personal information and don't use it for profiling. The only advertising measurement is Google's conversion tag described in section 6: in the EU, the EEA, the UK and Switzerland it loads only with your consent, and Do Not Track or Global Privacy Control turns it off everywhere.
9. Children
DotMD is not directed at children under 16, and we don't knowingly collect data from them. If you believe a child has given us data, write to us and we'll delete it.
10. Changes
If this policy changes, the date at the top changes, and we announce changes that matter in DotMD or on getdotmd.com. Earlier versions are available on request.