# privacy policy

last updated: april 2026

## data we collect

- email address (via Apple Sign-In or GitHub)
- files and content you upload, sync, or create
- spaces and their settings
- device information for push notifications and file sync
- usage data (request URIs and timestamps)

## where data is stored

sublimated uses Cloudflare infrastructure. files are stored in Cloudflare R2 (EU jurisdiction). database on PlanetScale PostgreSQL in EU (Dublin). data is processed in the EU.

## your content

you own all content you create or upload. content is private by default. when you make a space or folder public, it becomes accessible to anyone with the URL. we need permission to store and deliver your content but will not use your private files for any other purpose.

## content processing

to provide features like link resolution, navigation, table of contents, and file previews, we process your content server-side. this includes parsing markdown structure (headings, links, frontmatter), extracting image metadata, and detecting file types. all data derived from your content — parsed structures, indexes, extracted metadata — belongs to you and follows the same privacy and deletion rules as your original files.

## file sync

the sublimated macOS app uses Apple's FileProvider to sync files between your Mac and sublimated. files are stored locally on your device and synced to our servers over HTTPS. credentials are stored in the macOS Keychain and never leave your device unencrypted.

## push notifications

if you enable notifications, we send push notifications via Apple Push Notification service (APNs) when files in your spaces are updated. you can disable notifications at any time in System Settings.

## data deletion

you can delete files, spaces, or your entire account from settings. deleted content is removed from your view immediately. underlying storage cleanup may take longer. contact hi@sublimated.com for help.

## encryption at rest

credential files (.env, .key, .pem, .pfx, .p12, certificates) are automatically detected and encrypted at rest using per-space encryption keys. you can add custom sensitive file patterns via config.yml in your space. all other files are stored unencrypted in content-addressed storage.

## security

report security vulnerabilities to hi@sublimated.com. we will disclose any breaches that occur.

## changes

we may update this policy. major changes will be announced via email to active users.

## contact

questions about privacy: hi@sublimated.com

operated by: System Operator LLC, Delaware, USA.