Privacy Policy for spaceMD
This policy explains how spaceMD handles information. spaceMD is a Mac app that displays Markdown documents in Finder Quick Look and in its own viewer.
The short version
Your documents are processed locally on your Mac. Corebird does not receive their text, file names, paths or images through spaceMD. The app has no Corebird account, advertising, analytics or tracking SDK. It contacts Apple's App Store services to offer and verify the optional one-time purchase for formatted Quick Look previews.
Documents you open
spaceMD reads a Markdown file when you select it for Quick Look or open it in the viewer. The file is converted to a formatted page on your Mac. The app does not upload the document for rendering and does not modify its contents.
The viewer watches an open file for changes so it can refresh after another app saves it. This happens locally.
Images and folder access
A Markdown document can refer to images stored beside it. Because the macOS sandbox does not automatically give the Quick Look extension access to those files, spaceMD lets you explicitly grant access to selected folders.
For a granted folder, the app stores a security-scoped bookmark on your Mac. It makes local copies or hard links of eligible image files in the app's shared container so the Quick Look extension can display them. The current limits are 8 MB per image and 300 MB in total. When you remove a folder permission, images that are no longer covered are removed from this local mirror during synchronisation.
Folder access is optional. Without it, spaceMD displays placeholders for local images. It does not send folder contents to Corebird.
Remote content and links
Remote images, scripts and other web resources referenced by a document are blocked from loading. This prevents a document from fetching a tracking pixel merely because you preview it. If you click an external link, spaceMD passes it to your default browser. The destination site then operates under its own privacy terms.
spaceMD's sandbox includes network permission because the WebKit process used for rendering requires it and because StoreKit communicates with Apple. The rendered document itself is restricted by a Content Security Policy and is not allowed to load external resources.
App settings
The app stores display settings locally, including theme, text size, line length, footer choice and whether embedded HTML is allowed. It also stores folder bookmarks and the local state needed to make the chosen settings and purchase entitlement available to the Quick Look extension.
Purchases
The optional Quick Look unlock is sold as a non-consumable in-app purchase through Apple. Apple processes payment and account information. spaceMD uses StoreKit to request the product, complete or restore a purchase and check whether a verified entitlement exists. The app stores the resulting unlocked or locked state locally for the extension. Corebird does not receive your payment-card details.
Apple may process purchase and device information under its own privacy policy and App Store terms.
Data collected by Corebird
The current app does not send documents, diagnostics or usage statistics to Corebird. Corebird therefore does not retain app-usage data and does not sell or share such data for advertising.
If you contact support, Corebird processes the information you choose to include so the request can be answered. Avoid attaching confidential documents unless they are necessary and you are authorised to share them. The handling of website and support data is described in the privacy policy for corebird.de.
Children
spaceMD is a productivity utility and is not directed to children. The app does not knowingly collect personal information from children.
Changes to this policy
This policy will be updated if the app's data handling changes. The date at the top shows when the text was last revised.
Contact
Controller:
Danyel André Maus
Cami des Jardi d'en Ferrer 72
ES-07141 Marratxí
Spain
Privacy contact: privacy@corebird.de. Requests about your own data are always handled by a person, never answered automatically. For anything else, the support form is the faster way in.
Full provider identification is in the legal notice.