Privacy Policy

Application: MDVIEW · Effective date: 30 July 2026

This Privacy Policy explains how MDVIEW (“MDVIEW”, “the App”, “we”, “us”) handles information when you use the application to upload, preview, and share Markdown documents, including the optional feature to view Google Drive documents. By using the App you agree to the practices described here.

1. Who we are

MDVIEW is a lightweight Markdown preview tool operated by its developer. For any privacy question or request, contact us at riloaw@gmail.com.

2. Information we process

2.1 Files you upload

When you upload a Markdown file, its contents are stored on the server hosting the App (in a single upload directory) so the App can render a preview and generate a shareable link. Uploaded files remain available until they are removed by the operator of the server.

2.2 Google account data (optional Drive feature)

If you choose to view a Google Drive document, you sign in with Google (OAuth). We request read-only access to your Google Drive (the drive.readonly scope) solely to:

read the metadata (name and type) of the specific document you open, and
fetch that document’s content — exporting Google Docs to Markdown, or downloading Markdown/text files — so it can be rendered for you.

Documents are rendered live and are not stored by the App. We only access the specific file you request; we do not browse, index, or copy your other Drive files. Because access uses your own Google credentials, you can only view documents you already have permission to access.

2.3 Authentication tokens and sessions

After you sign in with Google, the resulting OAuth token is held in the server’s memory and referenced by a session cookie (mdp_sess). Tokens are not written to a database and are discarded when you log out or when the server restarts. We use short-lived cookies during the sign-in flow to protect against cross-site request forgery.

2.4 Local browser storage

Your theme (light/dark) and zoom preferences are stored in your browser’s localStorage on your device only. They are never sent to the server.

2.5 Information we do not collect

We do not run advertising or third-party analytics/tracking, and we do not sell or rent any information. The App does not intentionally collect names, contact lists, or other personal data beyond what is described above.

3. Google API Services — Limited Use

MDVIEW’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the document-preview feature you request, do not transfer it to others except as needed to provide that feature or as required by law, and do not use it for advertising or to train generalized AI/ML models.

4. How we use information

To render and display Markdown previews of files you upload or Drive documents you open.
To generate shareable preview links.
To authenticate you with Google and enforce that you only view documents you are authorized to access.

5. Sharing and third parties

The App communicates with Google APIs to authenticate you and fetch the documents you request. The preview page also loads the Mermaid diagram library from a public CDN (jsDelivr) to render diagrams in your browser. We do not otherwise share your information with third parties.

6. Data retention

Uploaded files persist on the host server until deleted by the operator. Google OAuth tokens persist only in server memory for the duration of your session and are cleared on logout or server restart. Browser preferences persist locally until you clear them.

7. Security

We use HTTP-only session cookies and rely on Google’s OAuth for authentication. However, no method of transmission or storage is completely secure. You are responsible for keeping your device and Google account secure, and for the sensitivity of any file you upload.

8. Your choices and rights

You can disconnect the App at any time by logging out, or by revoking access from your Google Account permissions.
You can request removal of files you uploaded, or ask questions about your data, by contacting riloaw@gmail.com.

9. Children

The App is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy: riloaw@gmail.com.