Privacy policy

Mdfoundry is built to be calm and quiet. That goes for your data too. Here is what we collect, why, and how to get it removed — in plain language.

What we collect

• Your account. If you create an account we store your handle, display name, email, and a hashed password. We never store your password in plain text. If you sign in with GitHub, we store your GitHub account id and the public basics it returns (name, avatar).
• What you make. Prompts you publish (title, body, tags) and your community activity — forks, upvotes, comments, and who you follow. Published prompts are public by design.
• Waitlist. If you join the waitlist, we store the email you enter and which button you used, so we can tell you when Mdfoundry ships.
• Messages. If you write to us through the contact page, we keep your email and message so we can reply.
• Technical basics. Like any website, our host processes the requests your browser makes and may keep standard, short-lived security and aggregate traffic logs. We do not run third-party analytics or advertising trackers.
• Analytics. We measure traffic with Cloudflare Web Analytics, which is cookieless and collects only aggregate, anonymous page metrics — no cross-site tracking and no profile of you. We also keep simple first-party counts of a few key actions (for example, clicking download or joining the waitlist) so we can tell what's working. Those counts carry no personal information — at most a random id stored in your browser to avoid double-counting — and are never shared with anyone.

Cookies and tracking

One essential cookie, mdfoundry_session, keeps you signed in. It is not used for advertising or cross-site tracking. If you are signed out, we set no cookies. Our analytics are cookieless, so there is no consent banner to click through. The waitlist remembers your choice — and our anonymous analytics id lives — in your browser's local storage, not in a cookie.

Where it's stored

Account and community data live in Cloudflare D1 (a SQLite database) on Cloudflare's infrastructure; sign-in sessions live in Cloudflare KV. We keep data only as long as we need it to run the service.

What we don't do

We don't sell your data, and we don't share it with advertisers. We won't email you except to reply to you, or — if you joined the waitlist — to tell you when Mdfoundry is ready.

Deleting your data

You can ask us to delete your account and everything tied to it at any time, and we will. If there's a published prompt you want taken down, tell us and we'll remove it. Reach us through the contact page. (Self-serve deletion is on the way.)

Children

Mdfoundry isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date above and note anything significant on the site.