Privacy Policy

Last updated: March 2026

This Privacy Policy explains how mkdn LLC (“we”, “us”, or “our”) collects, uses, and stores information when you use mkdn.io.

1. Data We Collect

When you sign in and use mkdn.io, we collect:

GitHub profile data — your name, email address, avatar URL, and GitHub username, obtained via GitHub OAuth
Site configuration — repository details, subdomain settings, and display preferences you configure in the dashboard
Usage analytics — aggregate request counts, content type distribution, and geographic region (no individual tracking)

We do not collect passwords or any repository content beyond what is required to serve your documentation. Payment information for paid plans is processed by Stripe and is not stored on our servers.

2. How We Use Data

We use collected data to:

Authenticate you and maintain your session
Serve your documentation sites to visitors
Display your site list and configuration in the dashboard
Show aggregate traffic analytics in the dashboard
Send transactional emails (account notifications, billing receipts)
Detect abuse and enforce our Terms of Service

We do not sell your personal data to third parties or use it for advertising.

3. Data Storage

Your data is stored on Cloudflare infrastructure:

Cloudflare D1 — relational database storing user accounts, sessions, and site configuration
Cloudflare KV — edge cache storing rendered pages and search indices
Cloudflare R2 — object storage for uploaded assets (logos, static files)

Data is stored in Cloudflare’s global network in accordance with Cloudflare’s data localisation policies.

4. Third-Party Services

We use the following third-party services, each of which may process your data as described:

GitHub — OAuth authentication and content source API; GitHub Privacy Statement
Cloudflare — all infrastructure (hosting, CDN, database, storage); Cloudflare Privacy Policy
Stripe — payment processing for paid plans; your payment details are handled directly by Stripe and are not stored on our servers; Stripe Privacy Policy
Resend — transactional email delivery (account notifications, billing receipts); your email address is shared with Resend solely for this purpose; Resend Privacy Policy

5. Cookies

We use a single session cookie set by our authentication library (better-auth) to keep you signed in. This cookie is strictly necessary for the service to function. We do not use tracking cookies, analytics cookies, or advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account (via the dashboard or by contacting us), all personal data and site configuration is permanently deleted within 30 days. Aggregate anonymous analytics may be retained indefinitely.

7. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your account and personal data
Portability — request your data in a machine-readable format

To exercise these rights, contact us at the email below.

8. Contact

For privacy-related questions or requests, please email privacy@mkdn.io.