Privacy Policy

1. Who we are

Docly is a free web application for writing and previewing Markdown documents, with optional cloud save when you sign in with Google. Operator contact: buymeacoffee.com/dinudsi.

2. Information we collect

2.1 Information from Google sign-in

If you choose to sign in with Google, we receive profile information that Google provides through OAuth, which typically includes:

• Name
• Email address
• Profile photo URL
• Google account identifier (subject ID)

We use Google OAuth only for authentication and account identity. We do not request access to your Gmail messages, Google Drive files, contacts, or other Google data beyond basic profile information needed to sign you in.

2.2 Documents you save

When you are signed in and save a document, we store the document name, content, and timestamps, associated with your user ID, so you can load and edit them later.

If you use the editor without signing in, your draft content stays in your browser session and is not uploaded to our servers for cloud save.

2.3 Technical and session data

• Session cookies / tokens required to keep you signed in
• Basic request metadata (such as IP address and user agent) that may be recorded with sessions for security
• Local browser storage for editor settings (for example font size preferences)

2.4 What we do not intentionally collect

• Payment card data (the Service is free; optional sponsorship is handled by third parties such as Buy Me a Coffee)
• Precise geolocation
• Sensitive special-category data beyond what you voluntarily put in document content

3. How we use information

We use information to:

• Authenticate you via Google and maintain your session
• Provide cloud document storage, listing, editing, and deletion for your account
• Secure the Service (abuse prevention, debugging, integrity of sessions)
• Improve reliability and fix errors
• Comply with legal obligations when required

We do not sell your personal information. We do not use Google user data for advertising, credit decisions, or unrelated AI training markets.

4. Google API Services User Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only use Google user data to provide or improve user-facing authentication and account features
• We do not transfer Google user data to third parties except as necessary to provide the Service, comply with law, or with your direction
• We do not use Google user data for serving advertisements
• We do not allow humans to read Google user data except with your consent, for security/abuse investigation, to comply with law, or where data is aggregated and anonymized

5. Legal bases (where applicable)

If you are in a region such as the EEA/UK, we process personal data based on: performance of a contract (providing the Service you request), legitimate interests (security, service improvement), and consent where required (for example optional Google sign-in).

6. How we share information

We may share information only as needed with:

• Google — when you authenticate (handled under Google's terms and privacy policy)
• Infrastructure providers — if the Service is hosted on cloud or VPS infrastructure that processes data to run the app
• Legal authorities — when required by law or to protect rights, safety, and the Service

We do not sell personal data to data brokers.

7. Data storage and security

Account and document data are stored in our application database (SQLite on the server hosting Docly). We take reasonable technical measures to protect data (access controls, session cookies, HTTPS when configured on the host). No method of transmission or storage is 100% secure.

8. Data retention

• Account profile — retained while your account exists
• Saved documents — retained until you delete them or request account deletion
• Sessions — expire according to session settings (typically up to 30 days of inactivity / configured lifetime)

9. Your rights and choices

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated documents
• Export your documents (you can copy content from the editor or request assistance)
• Withdraw consent by signing out and discontinuing Google sign-in use

To request access or deletion, contact us via buymeacoffee.com/dinudsi using the email associated with your Google account. You can also revoke Docly's access to your Google account in your Google Account permissions.

10. Cookies and local storage

We use essential cookies/session tokens for authentication. We also use browser local storage for non-essential editor preferences. We do not use third-party advertising cookies on the core editor experience.

11. Children

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us so we can delete it.

12. International transfers

If you access the Service from outside the country where our servers are located, your information may be processed in that host country. By using the Service you understand that such transfers may occur subject to applicable law.

13. Third-party links

The Service may link to third parties (for example sponsorship pages). Their privacy practices are their own; we encourage you to read their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be highlighted in the Service when appropriate.

15. Contact

Privacy questions or data requests: buymeacoffee.com/dinudsi.

Related documents: Terms of Service.