Privacy

The MDDock desktop client is local-first. Your markdown files, history, and recall index live in your workspace on your machine. They are never uploaded unless you explicitly publish a project or enable cloud sync. If you use AI Chat, your question and the matching note snippets are sent to MDDock Cloud and the upstream model provider — the app asks for your explicit consent before the first send.

When you visit this site: mddock.com

• HTTP request logs (IP, user agent, path) for the duration set by the operator
• If you sign in: your handle, email, and avatar URL from the OAuth provider
• If you publish a project: the project files you submit and basic metadata (stars, forks)

By default, this site does not set tracking cookies or run third-party advertising. The only third-party request we may make is to Google Analytics 4 — but only after you accept the cookie consent banner shown on your first visit. You can withdraw that choice at any time by clearing the `mddock-cookie-consent` value in your browser.

This site uses one essential cookie set by next-auth to keep you signed in. If you accept analytics, Google Analytics 4 sets its own cookies (used to measure aggregated, anonymous traffic). No other tracking cookies are used.

We use Google Analytics 4 to understand which pages get read, so we can write better docs and tools. The data is aggregated and anonymous; we do not track individuals across the site.

• GA4 receives your IP address (truncated in our config), the page URL you visited, the browser user agent, and a pseudonymous client ID set by GA4 itself. We have disabled Google Signals, Ad Personalization, and all advertising features.
• GA4 is only loaded after you click **Accept** on the cookie consent banner. If you click **Decline**, no GA4 request is made and no GA cookies are set. Your choice is stored in `localStorage` under the key `mddock-cookie-consent` and persists across visits on the same browser.
• We configured GA4 to anonymize IP addresses and we never share the raw data with third parties. Google's own data retention rules apply to anything Google stores on their side — see [Google's privacy policy](https://policies.google.com/privacy) for the details.

Your local vault is stored as plain Markdown files on your disk. Cloud sync and Cloud Docs are encrypted in transit (TLS); synced content is stored on the server so collaborators and agents you authorize can access it. End-to-end encrypted sync is on the roadmap.

• Export everything: mddock export --to-zip
• Delete published projects: from your project page → Settings → Delete
• Delete your account: contact us at the address in the footer (no self-serve flow yet) edwin@mddock.com

Email us at the address in the footer for any privacy question, data access request, or to opt out of analytics retrospectively.

Material changes to this policy will be announced in the changelog.