Privacy policy

sitemd is the service at sitemd.app, run from Denmark. It is the controller of the data about you, the account holder. For the data of your site's visitors you are the controller and we are your processor; the data processing agreement says how.

Your name and email, a hash of your password (never the password itself), when you signed in and from which browser, the workspaces you are in and your role there, everything you write on your sites, the pictures you upload, the look you choose, and your own domain if you connect one.

We keep it to run the service you asked for: to sign you in, to save your work, to publish your site. The legal basis is the agreement with you (GDPR article 6(1)(b)).

Stripe handles the card; we never see the number. We keep the state of your subscription and the id Stripe gave you as a customer.

To confirm your address, to reset a password, to sign you in by link, to invite a colleague, and to forward messages sent through your site's forms. No newsletters and no marketing, ever.

We count visits per page and per day, the site that sent them, and whether they came by phone, tablet or computer. No IP address is kept, no cookie is set, and nobody is followed from one site to another. Crawlers, link previews and your own clicks from the studio are not counted.

The visitor's name, email, phone if you asked for it, and the message. It is sent to the address you chose and kept for 30 days as a safeguard against a mail that did not arrive, then deleted. Deleting the site deletes them at once.

The studio sets one cookie: your session, which is strictly necessary to keep you signed in. Your theme preference lives in the browser's own storage. There are no analytics cookies and no third parties.

Published sites set no cookies at all. They need no cookie banner, and have none.

On Cloudflare, in the European Union: the database and the picture store are set to the EU jurisdiction. Cloudflare is our processor and keeps the logs of requests it needs for its own security for a short time. The worker's own logs are kept for three days.

For as long as you have an account. Delete it, and every workspace you are alone in goes with it, sites, pictures and messages, at once. Where you share a workspace, your seat goes and the workspace stays with the others.

You can see, correct and delete what we keep, and take your text with you, from inside the service: your account on the workspace screen, your text as markdown from any page's settings, the whole account under Delete account. What you cannot reach yourself, write to us about. You can complain to Datatilsynet, the Danish Data Protection Agency.

When the service changes, this text changes with it, and the date at the top says when.

Questions about any of this go to hey@sitemd.app.