What MDSyntax knows about you

1. Who we are

MDSyntax is developed and published by Mentis Vision LLC, a Hawaii limited liability company (“Mentis Vision”, “we”, “us”). For the purposes of the GDPR we are the data controller for the limited personal information described below.

Mentis Vision LLC
Honolulu, Hawaii, United States
[email protected]

2. Your documents never leave your device

Every file you open in MDSyntax — Markdown, source code, HTML, SVG, images, JSON and AI transcripts — is read from your local filesystem, parsed on your machine, and rendered by the application itself. The same is true of every export: PDF, Word, HTML and rich-text output are generated locally and written to a location you choose.

We never receive the contents of your files, their filenames, their paths, or any statistic derived from them. This is not a policy commitment layered on top of a data pipeline; there is no pipeline. The application has no code that transmits document content anywhere.

3. No analytics and no telemetry

MDSyntax contains no analytics SDK, no usage tracking, no session recording, no advertising identifier and no automatic crash reporting. We do not know how often you launch the app, which features you use, or whether you use it at all.

4. The only network requests the app makes

There are exactly two, and you trigger both of them.

a. Licence activation and validation

If you buy MDSyntax Pro, you receive a licence key. When you enter it, the app contacts our payment provider’s licence service to confirm the key is valid and to register the activation against your seat allowance.

What is sent: the licence key, and an activation identifier generated randomly on first run so that the three-machine limit can be enforced. It is not a hardware fingerprint and nothing about your documents is included.

Who receives it: Polar, our merchant of record and licensing provider, acting as our processor. Their privacy notice governs their own handling of that data.

How often: on activation, on deactivation, and about every 14 days to re-confirm the licence. If the check cannot reach the network, Pro keeps working for a 30-day offline grace period.

If you bought MDSyntax from the Mac App Store, none of this applies: entitlement is handled by Apple’s own in-app purchase system and the app makes no licensing request of its own at all.

b. “New from URL”

If you explicitly ask MDSyntax to open a document from a web address, the app fetches that address directly from your machine, exactly as a browser would, and converts the result for reading.

Who receives it: only the site you named. The request does not pass through any server of ours, and we are not told that you made it.

HTML files you preview are rendered inside a sandboxed frame under a local protocol. Remote resources referenced by such a page are blocked by the application’s content policy.

5. What is stored on your own machine

The app keeps a small amount of state locally so it behaves sensibly between launches. This data stays on your device, is never transmitted, and can be removed by uninstalling the application.

• Your preferences — theme, reading style, text size, autosave and default view
• Recently opened files and the folders you added to the Library
• Window size and position
• Unsaved editor drafts and local version-history snapshots
• Your licence key and activation record, if you have one

6. Purchases

When you buy a licence, the transaction is handled by Polar as merchant of record. They collect the information a purchase requires — name, email address, billing country and payment details — and process payment through their own providers. We receive an order record containing your email address, purchase amount and licence key so that we can support you and honour refunds. We never see your full card details.

If you obtain MDSyntax through the Mac App Store or the Microsoft Store, that transaction is handled entirely by Apple or Microsoft under their own privacy terms, and we receive only aggregate, non-identifying sales reporting from them.

Legal basis, where the GDPR applies: performance of a contract (Art. 6(1)(b)) for purchase and licensing data, and our legitimate interest in preventing licence abuse (Art. 6(1)(f)) for activation records.

7. Support correspondence

If you email us, we hold that message and your address for as long as needed to help you and to keep a record of the issue, then delete it. Please don’t send us a confidential document to reproduce a bug — describe it instead, or send a minimal example you’re comfortable sharing.

8. This website

mdsyntax.com serves static pages. It sets no advertising or tracking cookies and runs no third-party analytics. Our host retains standard server logs (IP address, timestamp, requested path, user agent) for a short period for security and abuse prevention. Following a link to a checkout page hands you to Polar, whose own cookies and notice then apply.

9. Retention

Order and licence records are kept for as long as the licence is active and thereafter for the period required by tax and accounting law. Support email is deleted once the matter is closed and any warranty window has passed. Everything else described here lives only on your machine, for as long as you keep it there.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold, to object to or restrict its processing, and to withdraw consent. Because the only personal information we hold is your purchase and licence record, a request usually amounts to producing or erasing that record — which we will do on request to[email protected], within 30 days.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. Exercising any right will never cause us to give you a worse product or price. EEA and UK residents may also lodge a complaint with their local supervisory authority.

11. International transfers

We are based in the United States, and our payment provider processes data there. Where personal information is transferred out of the EEA or UK, that transfer relies on the European Commission’s Standard Contractual Clauses as incorporated into our provider’s terms.

12. Children

MDSyntax is a professional tool and is not directed at children under 13. We do not knowingly collect personal information from them. If you believe a child has provided us information, write to us and we will delete it.

13. Changes to this policy

If we change this policy we will update the effective date above and, for a material change affecting existing customers, note it in the app’s release notes. Continuing to use MDSyntax after a change means you accept the revised policy.

14. Contact

Questions, requests or complaints — about privacy, the product or billing — go to[email protected]. We answer every one.