Typeleaf Privacy Policy

Effective date: October 8, 2026

Typeleaf is a Markdown editor that runs on your computer. It has no accounts and does not collect or upload your documents or usage data. It contains no analytics, advertising or crash reporting. This page says when Typeleaf uses the network and what it keeps on your computer.

What stays on your computer

These are kept on your computer only; Typeleaf does not send them anywhere:

• the documents you open and edit, where you save them;
• settings, recent files, the caret and scroll position of each file, the tabs you had open;
• crash backups of unsaved documents, to recover them after an unexpected exit;
• image upload configurations and the upload history (a digest of each uploaded picture's content and the address it got, so it is not uploaded twice);
• local logs, for troubleshooting;
• version history (Pro): the versions of a document kept at each save; the document templates you saved (Pro);
• writing statistics (how much you wrote each day, the minutes and the daily goal), the typography preset you chose, and a note of the add-ons bought (to show the supporter themes before the Store answers).

They are in Documents\Typeleaf and %LOCALAPPDATA%\Typeleaf (for the Microsoft Store version, in the app's own data folder). Uninstalling the Microsoft Store version removes this app data with it; after uninstalling the installer version it stays and can be deleted by hand. Your documents are not affected either way.

When Typeleaf uses the network

Only in these cases, each caused by something you do or something you put in a document:

• Images from the web in a document: when a document refers to an image by a web address, the editor loads it from there, as a browser would; that server sees the request.
• Pasting or dropping a link: when you paste a web address, Typeleaf fetches the page to use its title; when you drop one, it checks whether it is an image.
• PlantUML diagrams (off by default): after you turn on "Draw PlantUML diagrams" in Settings > Editor, the source of PlantUML code blocks is sent to plantuml.com, which draws them - or, if you entered a server of your own under "PlantUML server", only to that server. While it is off nothing is sent, and HTML/PDF export keeps them as code. plantuml.com's own privacy policy applies to what it receives.
• Sharing to HedgeDoc (optional): when you have set up a HedgeDoc server and use Share, the current document is sent to that server. The sign-in password is encrypted with Windows Data Protection (DPAPI), kept on your computer and sent only to that server.
• Image upload (optional; nothing is uploaded by default): once you have set up an upload configuration in Settings > Image and chosen it under "Upload with", these send image files to where it says: the Upload action when inserting an image, File > Upload local images, and Test upload on the configuration page. The S3-compatible method (Amazon S3, Cloudflare R2, Alibaba Cloud OSS, Tencent Cloud COS, MinIO and others) sends them to the bucket you entered; the PowerShell method runs a script you wrote, which decides where they go. Only the image files are sent, never the document. The S3 Secret Access Key is encrypted with Windows Data Protection (DPAPI), kept on your computer, and used only to sign the requests to that bucket. The terms of the service that receives the images apply to what it receives.
• Pictures in a pasted web page: when Settings > Image sets web pictures to "Copy to path" or "Upload", pasting a web page downloads its pictures; the requests carry the address of the page they were copied from (as the referring page), so that sites with hotlink protection hand them over. With "No action" nothing is downloaded.
• Opening links: clicking a link in a document opens the page in your browser.
• Sending feedback: "Report a problem by email" starts a new message in your mail program with Typeleaf's version, the Windows version and the interface language filled in; whether and what to send is up to you. "Rate and review in the Store" opens the Microsoft Store's rating window.
• The editor component: Typeleaf shows its editor with Microsoft Edge WebView2. Updates of the WebView2 runtime and the data they involve are Microsoft's, under the Microsoft Privacy Statement.

In-app purchases

The supporter add-ons and Pro are bought through the Microsoft Store, which handles the payment; Typeleaf never sees your payment details. Typeleaf asks the Microsoft Store for the add-ons' prices and which of them you own; the Microsoft Privacy Statement applies to those requests.

Local automation

Typeleaf has an interface through which programs on your computer can read and edit open documents. It is off by default and is turned on in Settings > General. It accepts only programs running on the same computer as your user, and cannot be reached over the network.

Children

Typeleaf collects no personal information from anyone, children included.

Changes

If this policy changes, this page is updated with a new effective date.

Contact

Questions about this policy: typeleaf@mingdan.uk