Privacy policy
Last updated: 7 October 2026
pencil.md is a free markdown and drawing publishing service. This policy covers
the website, the public API, and the Claude / ChatGPT connector (the MCP server
at https://pencil.md/mcp).
# What we store
- Pages and drawings you publish: title, content, creation and update
times, a view counter, and (if you set one) a password hash. Pages are public
to anyone with the link unless you protect them with a password. - Images you upload: stored in object storage and served at a public URL.
- An anonymous identity: a random ID in a signed cookie (
pencil_uid).
It marks which browser owns which pages. It contains no personal data. - Connector credentials: when you connect an AI assistant, we store the
app’s registration, and hashed access/refresh tokens tied to your anonymous
identity. We never see your Claude or ChatGPT account details.
# What we don’t do
- No accounts, no email addresses, no names.
- No analytics, no third-party scripts, no advertising, no tracking pixels.
- We do not sell or share data. Content is only read by our servers to render
and serve it. - We do not read your conversations with your assistant. The assistant sends
us only the content it is publishing or the page it is asking for.
# Connector data flow
When an assistant calls a connector tool, we receive the tool input (for
example, the markdown of a page) and return the result (for example, the
link). Nothing is retained beyond the published content itself and standard
short-lived request logs used for abuse prevention.
Disconnecting the app from Claude or ChatGPT revokes its tokens. Pages it
published remain online until you delete them.
# Infrastructure
The service runs on Cloudflare Workers, D1 and R2. Cloudflare may process
request metadata (IP address, user agent) under its own privacy policy for
security and performance.
# Your rights
Delete any page or drawing you own from its page, or ask your assistant to
delete it. For anything else, contact us at the address below.