mdshare Privacy

Privacy Policy

Effective 2026-05-03 · Last updated 2026-05-03

mdshare is a free markdown sharing service. No accounts, no login, minimal data — and what little we collect is described in full below.


What we collect

  • Markdown content you upload — the document body, stored on Cloudflare D1.
  • Comments anyone posts on a document, with the display name they choose. Comments default to "Anonymous" if no name is provided.
  • IP address and user agent, transiently logged via Cloudflare for abuse detection. Subject to Cloudflare's standard retention policy.
  • Aggregate page-view counts via Cloudflare Web Analytics — no personal identifiers, no cross-site tracking, no cookies.

What we don't collect

  • Email addresses — there is no signup or login mechanism
  • User accounts — none exist
  • No third-party trackers, advertising IDs, or cross-site cookies
  • No behavioral profiles or data tied to identified individuals

How content is shared

Documents are accessible via share links at the permission tier the link grants (admin, edit, comment, or view). We don't control who you share links with — the link is the only access control. Don't paste sensitive content.

Document lifetime

Documents and their comments auto-expire 90 days after the document's last edit by default. Expired records are permanently deleted from our database. The admin URL lets you shorten the expiry to trigger earlier deletion, or revoke individual share links to cut off access immediately. For immediate full deletion outside the expiry window, contact us at the email below.

Where data is stored

Cloudflare D1 (SQLite) for documents and comments, served through Cloudflare Workers across Cloudflare's global edge network. Cloudflare's privacy practices apply at the infrastructure layer.


Your rights under GDPR (EU/EEA users)

mdshare processes the minimal personal data described above on the lawful basis of legitimate interest (operating the free service) and your consent (by uploading content). You have the right to:

  • Access your document — anyone with the share link can view it; the admin URL gives full access.
  • Rectify content — the admin or edit URL lets you modify the document in place.
  • Erase content — the admin URL lets you shorten the document's expiry to trigger earlier deletion, or revoke share links to cut off access. Documents auto-delete after their expiry (default 90 days). For immediate full deletion, contact us at the email below.
  • Object to processing — stop using mdshare and your data will expire within 90 days (or sooner if you've shortened the expiry); revoke share links via the admin URL to cut off ongoing access.
  • Lodge a complaint with your local supervisory authority.

Cross-border transfer: data is handled by Cloudflare, a US-headquartered provider operating a global edge network. Cloudflare maintains Standard Contractual Clauses and other GDPR transfer safeguards.

Your rights under DPDPA (India users)

The Digital Personal Data Protection Act, 2023 grants you the rights to:

  • Notice — this policy serves as notice of the data processing.
  • Access — the share or admin URL provides access to your document.
  • Correction — via the admin or edit URL.
  • Erasure — shorten the document's expiry via the admin URL, wait for auto-deletion, or contact us for immediate removal.
  • Grievance redressal — contact us at the email below.
  • Nominate — you may nominate another person to exercise your rights in the event of incapacity or death.

Consent: by uploading content to mdshare, you consent to the minimal processing described above. You may withdraw consent at any time by revoking share links and shortening the document's expiry via the admin URL, or by contacting us to request immediate removal.

Cookies

mdshare itself sets no cookies. Cloudflare may set strictly-necessary cookies for security and bot detection at the network edge.

Changes to this policy

Material changes will be announced at mdshare.live. The effective date at the top reflects the most recent revision.

Contact

For privacy questions, data subject requests, or grievances: sathya@urbanmorph.com