Privacy Policy

This policy explains what personal data Docs To Markdown processes, why, on what legal basis, how long it is kept, and the rights you have under the EU General Data Protection Regulation (GDPR).

Last updated 3 August 2026

In short: the files you convert are processed in memory on our server and discarded as soon as the Markdown is returned. They are never written to disk, never stored in a database, never used to train models, and never shared. We have no accounts and no sign-up. The only ongoing data collection on this site is hosting logs and Google Analytics.

01Who is responsible for your data

This website, docstomarkdown.com, is operated by Docs To Markdown (“we”, “us”, the “Operator”). For the processing described in this policy, Docs To Markdown is the controller within the meaning of Article 4(7) GDPR.

For any privacy question or to exercise your rights, contact us at contact@docstomarkdown.com. We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.

02The files you convert

When you upload a document, it is sent over an encrypted (HTTPS) connection to our conversion endpoint, parsed in the server’s working memory, converted to Markdown, and returned to you in the response to that same request. Concretely:

  • The file is never written to disk, never placed in object storage, and never saved to a database.
  • It is not retained after the request ends. The memory holding it is released when the request completes, and no copy remains.
  • Its contents are not read by us, not sold, not shared with third parties, and not used to train machine-learning models.
  • Conversion is fully automated and deterministic. There is no human review and no automated decision-making that produces legal or similarly significant effects (Article 22 GDPR).
  • Error logs record only the technical error message and never the contents or the name of your file.

A document you upload may itself contain personal data — yours or other people’s. You choose what to upload and remain responsible for it: in relation to that content you act as the controller, and we process it solely to carry out the conversion you requested. Please do not upload files containing special categories of data (Article 9 GDPR) or other highly sensitive material unless you are satisfied that doing so is lawful for you.

03Data we do process

DataWhere it comes fromWhy
File content and file nameYour uploadTo perform the conversion you requested. Held in memory for the duration of the request only.
IP address, browser user agent, requested URL, timestamp, response statusAutomatically sent by your browser and recorded by our hosting providerTo deliver the site, keep it secure, detect abuse and denial-of-service attempts, and diagnose errors.
Analytics data: a pseudonymous cookie identifier, pages viewed, referring page, approximate location (country/region derived from IP), device, browser and operating systemGoogle Analytics cookies set in your browserTo understand which pages and converters are used, and how the site performs.
A dismissal flag for the cookie noticeStored in your browser's local storageSo the notice is not shown again on every page. It never leaves your device.

We do not operate user accounts, we do not ask for a name or an email address to use the converter, we do not process payment data, and we do not send marketing communications.

04Legal bases for processing

Under Article 6(1) GDPR we rely on the following legal bases:

PurposeLegal basis
Converting the file you upload and returning the resultArticle 6(1)(b) — performance of the contract formed when you ask us to convert a document under our Terms of Use.
Keeping the service available, secure and free from abuse (server logs, rate and size limits)Article 6(1)(f) — our legitimate interest in the security and integrity of the service, balanced against your interests.
Audience measurement with Google AnalyticsArticle 6(1)(f) — our legitimate interest in understanding how the site is used so we can improve it. You can opt out at any time; see section 06.
Complying with legal obligations that apply to usArticle 6(1)(c) — compliance with a legal obligation.
Where we rely on legitimate interests, you have the right to object at any time on grounds relating to your particular situation (Article 21 GDPR). For analytics you can also object simply by blocking or deleting the cookies described in section 05.

05Cookies and local storage

Cookies are small files stored by your browser. This site sets the following:

NameSet byTypeLifetimePurpose
_gaGoogle AnalyticsAnalytics2 yearsDistinguishes one browser from another using a pseudonymous identifier so that repeat visits can be counted.
_ga_<property-id>Google AnalyticsAnalytics2 yearsMaintains the analytics session state for this specific property.
dtm-cookie-noticeThis siteStrictly necessary (local storage, not a cookie)Until you clear your browser storageRecords that you have seen and dismissed the cookie notice. Contains no identifier and is never transmitted to us.

We do not use advertising, retargeting, profiling or social-media cookies, and we do not embed third-party trackers beyond Google Analytics.

06How to switch analytics off

Google Analytics runs on page load. If you would rather not be measured, any of the following works, and none of them affects your ability to use the converter:

  • Install Google’s official Analytics opt-out browser add-on.
  • Block or delete cookies for this site in your browser settings, or browse in a private window.
  • Use a content blocker or a browser with built-in tracking protection, which will prevent the Google Analytics script from loading at all.
  • Write to us at contact@docstomarkdown.com to object to this processing under Article 21 GDPR.

07Who else is involved

We do not sell personal data and we do not share it for anyone else’s marketing. Data is disclosed only to the service providers below, which act as our processors or, where indicated, as independent controllers, and only to the extent needed to run this site:

ProviderRoleWhat it handles
Vercel Inc. (United States) and its infrastructure providersProcessor — hostingServes the website and runs the conversion function; records request logs.
Google Ireland Limited / Google LLCAnalytics providerProvides Google Analytics and processes the analytics data described above.

We may also disclose data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

08Transfers outside the EEA

The providers above may process data in the United States. Such transfers take place on the basis of an adequacy decision where the recipient is certified under the EU–U.S. Data Privacy Framework, and otherwise on the basis of the European Commission’s Standard Contractual Clauses (Article 46(2)(c) GDPR) together with supplementary technical and organisational measures, including encryption in transit. You may request more information about these safeguards at the contact address above.

09How long we keep things

DataRetention
Uploaded files and their converted outputFor the duration of the HTTP request only — typically a few seconds. Nothing is retained afterwards.
Hosting and error logsKept for a short period for security and troubleshooting, in line with our hosting provider's log retention, and then deleted.
Google Analytics dataRetained according to the data-retention setting configured in our Analytics property, and in any event no longer than 14 months.

10Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you and receive a copy (Article 15).
  • Rectify inaccurate or incomplete data (Article 16).
  • Erasure of your data (Article 17).
  • Restrict processing in certain circumstances (Article 18).
  • Data portability for data processed by automated means on the basis of consent or contract (Article 20).
  • Object to processing based on legitimate interests, including analytics (Article 21).
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out beforehand (Article 7(3)).

Write to contact@docstomarkdown.com to exercise any of these rights. We will respond within one month, which may be extended by two further months for complex requests (Article 12(3)). Exercising your rights is free of charge.

Because uploaded files are not stored, we usually hold no data that would let us identify you in connection with a specific conversion. Where we cannot identify you, Article 11 GDPR applies and we may be unable to act on an access or erasure request unless you provide additional information that allows identification.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement (Article 77 GDPR). A list of national data protection authorities is published by the European Data Protection Board.

11Security

All traffic is served over TLS. Conversion runs in an isolated, ephemeral server environment with no persistent storage attached, uploads are capped at 4 MB, and access to the deployment is restricted to the Operator. No system is perfectly secure, but we take the technical and organisational measures required by Article 32 GDPR and keep them under review.

12Children

This service is not directed at children. We do not knowingly process the data of anyone under 16 years of age. If you believe a child has provided us with personal data, contact us and we will delete anything we hold.

13External links

Our guides and blog link to third-party sites. This policy covers only docstomarkdown.com; once you follow an external link, the privacy policy of that site applies.

14Changes to this policy

We may update this policy as the service changes or the law requires. The date at the top of the page always reflects the current version. Material changes will be signalled on the site before they take effect.

15Contact

Questions, requests or complaints: contact@docstomarkdown.com. See also our Terms of Use.