Privacy Policy

Last updated 2026-07-01 · Last reviewed 2026-07-01

MDFriday Limited ("MDFriday", "we", "us") operates mdfriday.com and Obsidian Share services. This policy explains how we collect, use, and protect personal information.

1. Scope

This policy applies to the MDFriday website, Browser Studio (studio.mdfriday.com), API (api.mdfriday.com), and Guest publishing and Personal hosting via the Obsidian Share plugin.

2. Information We Collect

2.1 Guest publishing (no account)

  • Device fingerprint or anonymous Guest identifier to associate temporary sites
  • Built static HTML/CSS/JS and assets you upload (stored on Cloudflare R2)
  • Publish metadata: slug, timestamps, expiry, site size
  • We do not receive or store your raw Markdown source files

2.2 Registered users (Google OAuth)

  • Email, display name, and avatar URL from your Google account
  • Plan, storage usage, and linked projects
  • OAuth session and JWT tokens (stored locally in Browser Studio or your device)

2.3 Payments (Personal plan)

Subscriptions are processed by Creem. We do not store full card numbers; we receive subscription status and transaction identifiers from Creem.

2.4 Website and analytics

With your explicit consent via the cookie banner, we use Google Analytics (G-TBP87MKH2M) for aggregated traffic data. Analytics scripts are not loaded if you decline.

3. How We Use Information

  • Provide, maintain, and improve publishing and hosting
  • Process subscriptions, billing, and support
  • Prevent abuse, fraud, and violations of our Acceptable Use Policy
  • Analyze website usage when you have consented
  • Comply with legal obligations

4. Storage and Processors

Static sites and API data are hosted on the Cloudflare global network. See our Subprocessors list.

5. Retention

  • Guest sites: deleted or anonymized after temporary URL expiry per product policy
  • Personal sites: retained while subscription is active; export period after cancellation per Terms
  • Account data: retained while account exists; removed within a reasonable period after deletion

6. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict processing, or data portability. Contact team@mdfriday.org.

7. Children

Our services are not directed at children under 16. We will delete child data collected without parental consent.

8. Changes

We may update this policy and will revise the "Last updated" date. Material changes will be communicated via the site or email.

9. Contact

MDFriday Limited · Privacy: team@mdfriday.org