1# privacy policy
2
3last updated: march 2026
4
5## data we collect
6
7- email address (via Apple Sign-In or GitHub)
8- files and content you upload, sync, or create
9- spaces and their settings
10- device information for push notifications and file sync
11- usage data (request URIs and timestamps)
12
13## where data is stored
14
15sublimated uses Cloudflare infrastructure. files are stored in Cloudflare R2 (EU jurisdiction). database on PlanetScale PostgreSQL in EU (Dublin). data is processed in the EU.
16
17## your content
18
19you own all content you create or upload. content is private by default. when you make a space or folder public, it becomes accessible to anyone with the URL. we need permission to store and deliver your content but will not use your private files for any other purpose.
20
21## content processing
22
23to provide features like link resolution, navigation, table of contents, and file previews, we process your content server-side. this includes parsing markdown structure (headings, links, frontmatter), extracting image metadata, and detecting file types. all data derived from your content — parsed structures, indexes, extracted metadata — belongs to you and follows the same privacy and deletion rules as your original files.
24
25## file sync
26
27the sublimated macOS app uses Apple's FileProvider to sync files between your Mac and sublimated. files are stored locally on your device and synced to our servers over HTTPS. credentials are stored in the macOS Keychain and never leave your device unencrypted.
28
29## push notifications
30
31if you enable notifications, we send push notifications via Apple Push Notification service (APNs) when files in your spaces are updated. you can disable notifications at any time in System Settings.
32
33## data deletion
34
35you can delete files, spaces, or your entire account from settings. deleted content is removed from your view immediately. underlying storage cleanup may take longer. contact hi@sublimated.com for help.
36
37## encryption at rest
38
39credential files (.env, .key, .pem, .pfx, .p12, certificates) are automatically detected and encrypted at rest using per-space encryption keys. you can add custom sensitive file patterns via config.yml in your space. all other files are stored unencrypted in content-addressed storage.
40
41## security
42
43report security vulnerabilities to hi@sublimated.com. we will disclose any breaches that occur.
44
45## changes
46
47we may update this policy. major changes will be announced via email to active users.
48
49## contact
50
51questions about privacy: hi@sublimated.com
52
53operated by: System Operator LLC, Delaware, USA.