--- title: "Privacy and data handling" description: "Privacy notice for editmd.app and the editmd Mac app: what we collect, why, where it goes and how to reach us." canonical: https://editmd.app/docs/privacy/ markdown: https://editmd.app/docs/privacy.md status: pre-release, waiting list open generated: editmd-website --- # Privacy and data handling Privacy notice for editmd.app and the editmd Mac app: what we collect, why, where it goes and how to reach us. Last updated 17 September 2026. ## Who is responsible Brencel AS, organisation number 829 668 602, Falsens gate 2, 3018 Drammen, Norway, is the data controller for this website. Reach us through the [Contact page](/contact/) and choose “Ask about privacy or security”, or write to the postal address above. ## Your Mac Your Markdown files and editor preferences stay on your machine. The Mac app needs no account and has no Brencel server behind it: no analytics, no advertising, no telemetry and no crash reporting. Local files can also be synced or backed up by services you choose; those services follow their own rules. ## This website This website uses no cookies, no advertising, no analytics scripts, no session replay and no third-party scripts. **Server logs.** Hosting receives ordinary page requests: IP address, browser details, the address requested, the time and the result. We use them to run and secure the site, which is our legitimate interest (GDPR Article 6(1)(f)). They are stored in Finland and deleted after 30 days. We count page views and downloads from these logs as plain totals. To stop abuse of the forms, the server also keeps a scrambled form of your IP address in memory for about one minute; it is never logged or stored. **Where the site is served.** The site is served from Finland; your connection may be handled by Google's network location nearest to you, and hosting logs are stored in Finland. **Stored in your browser.** Two things, both because you asked for them: your appearance choice, and your progress in the Markdown course. They stay in this browser and are never sent to us. No consent banner is needed for settings you chose yourself. ## Contact form When you write to us we receive the topic, your email address, your message and any version details you add. We use them to answer you, which is our legitimate interest in handling enquiries (Article 6(1)(f)). The message is delivered by our mail service to our mailbox at Google Workspace. We delete contact messages 12 months after our last reply. Server logs never contain your message or your address. ## Waiting list Joining the waiting list sends a confirmation email. You are added to the release list only after opening the link and pressing the confirmation button. We record the consent-text version and confirmation time with your address in Resend. The legal basis is your consent (Article 6(1)(a)). We use the address for one message, when the first release is ready, and delete it within 30 days after that message, and in any case 12 months after you confirmed. You can withdraw at any time through the [Contact page](/contact/); choose “Ask about privacy or security”. Withdrawing does not affect what happened before. ## AI providers Optional AI in the Mac app is off until you connect a provider. editmd generates nothing itself; it sends the text you chose to the provider you chose, which can be a local model on your Mac. Your API keys stay in the macOS Keychain. Brencel receives none of this traffic. The provider's account terms, charges and retention apply to that text. ## Who receives your data - **Google Cloud EMEA Limited**, Ireland: hosting, server logs and network delivery for this site, and the Google Workspace mailbox where contact messages arrive. - **Resend (Plus Five Five, Inc.)**, United States: sends our email and holds the waiting list. Resend processes and stores this data in the United States: your email address, your contact message with any version details, waiting-list confirmation emails and consent records. It keeps delivery records for a short period set by its service plan. See [Resend’s data-location explanation](https://resend.com/security/gdpr). Your details are not displayed publicly, sold or used for marketing. Discord and GitHub, which we link to, are separate services with their own privacy rules. ## Transfers outside the EEA Finland hosting and log storage do not mean every processing step stays in the EEA. Google’s global network can handle connections outside the EEA, and Resend processes the mail data described above in the United States. We rely on the EU standard contractual clauses in each provider’s data processing addendum: [Google Cloud Data Processing Addendum](https://cloud.google.com/terms/data-processing-addendum) and [Resend’s Data Processing Addendum](https://resend.com/legal/dpa). Both providers also take part in the EU-US Data Privacy Framework. ## Your rights You can ask us for access to your information, to correct or delete it, to restrict how we use it, or to receive a copy of what you gave us. You can object to processing we base on legitimate interest, and withdraw waiting-list consent at any time. Use the [Contact page](/contact/) and choose “Ask about privacy or security”; we answer within one month. You can also complain to the Norwegian Data Protection Authority, [Datatilsynet](https://www.datatilsynet.no/), or to the authority where you live. Giving us information is voluntary, and we make no automated decisions about you. ## Every destination, in order 1. **Your Mac.** Files, preferences and appearance. Always. 2. **Hosting.** Ordinary page requests when you visit this site. 3. **AI provider.** Only the scope you review, only when you send it. 4. **Mail service.** Only when you write to us or join the waiting list. Group: Reference. Handbook index: https://editmd.app/docs.md