Simple MD Reader

Simple MD Reader

Privacy policy

Simple MD Reader collects no personal information. It has no accounts, no analytics and no advertising, so there is very little policy to write.

The short version

The reader collects no personal information. It sends nothing about you, your documents or your device to us, and it sells and shares nothing with anyone. The only network requests it ever makes are the ones you ask for: checking whether a newer version exists, and loading images that a document itself points at.

This policy is about the application. The page you are reading is a plain HTML file: it sets no cookies, sends nothing to anyone, and loads nothing from anywhere else. The only script on it is the theme switch in the corner, which keeps your choice in this browser and nowhere else.

Who we are

Siam Prime Tech ("we", "us") is the developer of Simple MD Reader. This policy covers the Simple MD Reader applications published under the com.siamprimetech.mdreader identifier, on Google Play and the Apple App Store. Write to us through the issue tracker, or through the security advisories if it is about a problem with the reader.

What the reader does not do

What stays on your device

Two things are kept, and both are kept locally, on your device, in the application's own storage. Nothing about you is kept on our side: we run no servers for the reader and hold no database of readers.

What is stored, and why
What Why Where
Your settings Theme, color palette, typeface and text size, so the reader looks the way you left it. Local storage
The documents you opened recently The file path and the title only, so the reader can offer them back to you. Local storage

The reader never keeps a copy of a document's contents. It never modifies a file, and it never writes a file because of something in one.

What leaves your device, and when

There are exactly three cases, and the first two happen only when you ask for them.

  1. Checking for an update. When you press "Check for updates" in the about window, the reader asks GitHub for the latest release, and on the desktop it also fetches the release manifest and the update itself from github.com/siamprimetech/mdreader. These are ordinary HTTPS requests to GitHub. GitHub sees them as any server sees any request, including your IP address. We do not receive, log or store any of it.
  2. Images inside a document. If a markdown document refers to an image that lives on the web, the reader loads that image from the address the document gives. Whoever owns that address sees the request, exactly as they would if you opened the document in a browser. Nothing is sent to us.
  3. Links you click. Links in a document open in your browser rather than inside the reader. From that point on the website's own policy applies, not this one.

Nothing else in the application touches the network.

Permissions, and what they are for

The permissions the reader asks for
Permission Why it asks for it
Access to files you choose The reader opens documents through the system's own file picker, or through "Open with" from the file manager. On Android it is granted access only to the file you handed it.
Network access The update check, and images in a document that point at the web. On Android this is the INTERNET permission.
Clipboard Pasting markdown into the reader, which opens it as a new document. It uses the system's own paste action and reads only what you paste.

The reader does not ask for the camera, the microphone, location, contacts, SMS, phone state or the photo library, and it does not ask for broad storage access.

Fonts, libraries and third parties

The reader bundles its typefaces locally, so it never asks a font service for anything, and it never talks to Google Fonts or any other content delivery network. Its libraries are open source, and every license that applies to them is listed in the project's license file.

The one third party involved is GitHub, Inc., which hosts the project, the releases and the update manifest. Requests to GitHub are handled under GitHub's privacy policy, which is between you and GitHub, not with us.

Data retention and deletion

The settings and the recent documents list live on your device only. You can erase the history from within the reader, and removing the application removes the rest. Because we hold no copy of anything, there is nothing for us to keep, export or delete on request, but if you would like something done anyway, write to us and we will do it.

Children

The reader is a document viewer, and it is not directed at children. Because it collects no personal information at all, it collects none from children either.

Security

The reader sanitises the markdown it displays, so a document cannot run code or reach into the application, and every update is checked against a signing key before it is installed. If you find a way around any of it, please tell us through the project's security advisories.

Your rights

Depending on where you live, you may have rights over personal data: to see it, to correct it, to erase it, to object to its processing, or to complain to a regulator. Because the reader collects no personal data and shares none, there is nothing for us to give you, change or erase. If you think we hold something about you, write to us and we will look into it and answer.

We do not transfer personal data across borders, for the same reason.

Changes to this policy

If this policy changes, the date at the top of it changes with it, and the change is mentioned in the release notes of the version it applies to.

Contact

Siam Prime Tech
Issues: github.com/siamprimetech/mdreader/issues
Advisories: github.com/siamprimetech/mdreader/security/advisories
Project: github.com/siamprimetech/mdreader