The short version. SuperMD is a Markdown editor that runs entirely on your Mac. Your documents are plain files in your own folders. We never see them, never upload them, and have no server that could receive them. We do not know who you are, whether you use the app, or how often.
What we collect
Nothing. SuperMD contains no analytics SDK, no telemetry, no crash reporter, no advertising identifier, and no user accounts. There is no SuperMD server, so there is no place for your data to go.
Your documents
SuperMD reads and writes plain CommonMark files in folders you choose. Those files stay on your Mac. The app never transmits document content anywhere.
On the Mac App Store version, macOS additionally sandboxes the app: it can only reach folders you have explicitly opened through the system's open panel. Settings, themes and plugins live inside the app's own container.
When SuperMD uses the network
The Mac App Store version makes no network request at launch, in the background, or on any schedule — every connection it makes is the direct result of an action you took.
The versions downloaded from this site and from GitHub (the Mac disk image, the Linux packages and the Windows installer) additionally check api.github.com once per launch to see whether a newer release exists, and tell you if there is. That check sends no information about you or your documents beyond what any HTTPS request reveals to the server it contacts. It is the only thing SuperMD does without being asked, and the App Store version does not do it at all.
Everything else, in every version, happens only because you asked:
| Connection | What triggers it |
|---|---|
Plugin catalograw.githubusercontent.com |
Only when you follow a plugin install link. Fetches the list of available plugins. |
Plugin downloadgithub.com |
Only after you confirm an install. Downloads that plugin's archive, checked against a published SHA-256. |
| A plugin's own request | Only if you install a plugin that declares network access, and only after you approve each website it asks for. |
| Link preview | Only for sites you have turned previews on for, one site at a time. Hovering a link never makes a request: an external preview shows only the address and its domain until you click Enable previews for this site. Grants are remembered and can be revoked. |
These requests carry no identifier of you or your Mac beyond what any HTTPS request necessarily reveals to the server it contacts, such as your IP address. GitHub receives those requests under its own privacy statement; we receive nothing.
Plugins
Plugins run in a WebAssembly sandbox with no access to anything by default — no files, no network, no environment. Two capabilities exist and both ask your permission first:
- Reading your open folder — a one-time consent prompt, granting read-only access to that folder alone.
- Network access — asked per website, naming the site. Grants are remembered and can be revoked.
A plugin that has been granted network access can send data to the site you approved. That is the plugin's behaviour, under permission you gave it. The bundled plugins that use this do so only to enrich what you are editing, such as fetching the title of a link you pasted.
What is stored on your Mac
- Your settings, themes and installed plugins.
- A list of recently opened folders, so the app can reopen your last workspace.
- Local backups of documents, so an interrupted edit is recoverable.
All of this is local. None of it is transmitted. Deleting the app's container or its settings folder removes it.
Children
SuperMD is a general-purpose writing tool. It does not collect personal information from anyone, including children.
Changes
If this policy ever changes, the revised version will be posted here with a new date above. Because the app collects no data, we do not expect material changes.
Contact
Questions about this policy, or about SuperMD's handling of your data, can be raised at github.com/SuperJackfruitLabs/supermd/issues.
SuperMD is developed by Super Jackfruit Labs.