Privacy Policy

Effective October 2, 2026

md2pdf.studio is operated by JSiapoDev, an individual developer based in Peru, who is responsible for the processing described here. Contact: jsiapo.dev@gmail.com.

The short version

• Converting a file happens in your browser. Your Markdown is not uploaded to convert it.
• A document reaches our server only when you create a share link, and the app encrypts it in your browser first. The key stays in the link's #k= fragment, which browsers do not send to servers, so we cannot read it.
• You never have to give us personal data. Sharing is optional: if you don't share, no document is sent anywhere.
• No accounts, no cookies, no advertising.

What is processed, and for how long

Data	Where	Why	Kept
Your drafts, settings, and the links you created with their keys	Your browser's local storage only	Auto-save and editing your own links	Until you clear your browser data
Share links: the encrypted document, its ID, an edit key, creation and expiry dates	Cloudflare KV	Serving the link	30 days from creation, or until you delete it. Links created before the October 2, 2026 update: 90 days after their last update
Documents sent to the REST API in plain text (API "path 2")	Our server, in memory during the request	Encrypting them before storage	Only stored encrypted, as above. We do not keep the key
Your IP address, when you create, update or delete a link	Cloudflare's rate limiter, in memory	Preventing abuse of share links	About 60 seconds; we do not store it
Older /share?doc=… links, which carry the whole document unencrypted in the address	Our server, in memory, each time such a link is opened	Showing the document	Not stored. The link itself never expires and cannot be deleted
Standard request data (IP address, browser, page, referring site)	Cloudflare, which hosts the site	Delivering and protecting the site; we see aggregate counts such as visits per page and country	Under Cloudflare's retention policies; we keep no logs of our own

We also use Cloudflare Web Analytics, which counts page views without cookies and without identifying you.

Data banks

Two data banks: shared links (encrypted documents, link IDs, edit keys, creation and expiry dates) and abuse control (IP addresses, for about 60 seconds). Your IP address is processed because delivering a website requires it.

Processors and international transfers

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) hosts the site, the API and the share-link storage, and processes this data on our behalf on servers in many countries, including the United States, under its Data Processing Addendum.
• Your browser also downloads open-source libraries from cdnjs (Cloudflare) and jsDelivr, fonts from Google Fonts, and the project's star count from the GitHub API (GitHub, Inc., USA). Those providers receive your IP address under their own policies.
• Images, fonts or stylesheets that a document or your custom CSS links to load from their own sites, which receive the reader's IP address.

We do not sell or share data with anyone else, and we do not use it for advertising.

Your rights

You can delete any link you created from Export > My links, or with its edit key through the API. Because there are no accounts, we usually cannot tell which documents are yours. If you need anything else, such as access, correction, deletion or objection under Peru's Personal Data Protection Law (Law 29733), the GDPR or similar laws, email us and we will answer within the legal deadlines. In Peru you can also complain to the Autoridad Nacional de Protección de Datos Personales.

Children

The service is not directed to children under 14.

Changes

If this policy changes, we will update the date at the top. See also the Terms of Use.