Privacy
Your draft is read, analyzed, and converted entirely inside your browser. It is never uploaded, never stored on a server, and never included in any analytics or advertising request. There is no account to create and nothing to log in to.
Data that is never sent or stored
These categories are excluded by design, not by policy alone:
- Your Markdown source, in whole or in part.
- Any generated output for any destination.
- Your document title and front matter fields.
- Link targets found in your draft.
- Local or remote media paths found in your draft.
- Excerpts of your source shown beside a warning.
- Warning text derived from your content.
- Free-form error messages.
- Any content hash or identifier that could link one draft to another.
How that is enforced
- The analytics module accepts a fixed list of event names and a fixed list of enum or bucketed number properties. There is no code path that can accept text from your draft, and widening that list is a change that has to pass the privacy tests first.
- An automated test puts a unique marker in the body, title, a link, a media path, and alt text, runs the whole flow across all five destinations, and fails if that marker appears in any network request, header, request body, URL, console message, cookie, localStorage, sessionStorage, IndexedDB, or cache entry.
- A second test asserts the analysis makes no third-party request at all.
- Remote images in your draft are not loaded by the preview. They are shown as a labeled placeholder, so opening a draft never tells an image host that you are editing.
- A content security policy blocks script, frames, and connections to anywhere but this site.
What is measured
Markdown Preflight currently collects no analytics at all. If that changes, the only events permitted are: the tool being started, analysis completing, a destination being opened, a copy succeeding, a copy fallback appearing, an evidence record being opened, and a partner link being followed. Their properties are limited to which destination, which page type, a readiness status, a copy mode, a partner name, and a bucketed count. None of those carry your content.
Files you open
Choosing a local file reads it in the browser for the current session. No file handle is kept afterwards and nothing is written back to disk.
Third parties
There are no advertising scripts on this site today. If a partner recommendation is added later, it appears after the free result, carries a disclosure before the link, and blocking it does not change analysis, warnings, copying, or evidence access.