Privacy Policy

Moellenbeck-Digital UG (haftungsbeschränkt)

Luisenstraße 59
45892 Gelsenkirchen
Deutschland

E-Mail: admin@moellenbeck-digital.io

BloomMD processes account data such as email address, login and session data where required for registration, login and the free trial account.

Markdown files are processed locally by the local-first core. Data is transmitted to BloomMD only when an optional sync or cloud service is actively used.

The free trial account in M1 offers no paid plans, collects no payment data and provides no checkout. Payment providers become relevant only if BloomMD explicitly offers paid features later.

BloomMD may use Resend for account email such as email verification, password resets and important product notices. Content from Markdown files is not sent to Resend as email content.

Sentry may be used for error monitoring. PostHog is disabled by default and is loaded only when the deployment provides NEXT_PUBLIC_POSTHOG_KEY and NEXT_PUBLIC_POSTHOG_HOST and the browser analytics consent has been granted. PostHog autocapture, session recording and pageleave capture are disabled. Only page paths and allowlisted events are collected. Markdown content, file names, node titles, search terms, complete URLs and document paths are not sent as analytics events.

Realtime sync is initially optional and may be operated as a beta feature. Without sync enabled, Markdown files remain local. With sync enabled, the document structures required for collaboration are transmitted through the sync service.

BloomMD uses technically necessary session cookies to recognise signed-in users and provide protected areas.

Optional analytics consent is stored in the browser under `bloommd:analytics-consent:v1`.

The free trial account is valid for 30 days from email confirmation. Before it ends, we send you a reminder email after 15 days and another after 23 days. Purpose: to remind you that the trial period is ending. After it ends, your account is read-only and export remains possible.

Processed data: your email address, the time of your email confirmation, from which the sending times follow, the language of your signup (for the language of the email) and the time each reminder was sent (so that each one is sent only once). For existing accounts, the trial period counts from November 15, 2026. The emails are sent through our email provider (see transactional email). Legal basis: Art. 6(1)(b) GDPR, performance of the user relationship for the account.

The waitlist has ended; nobody can join it any more. Anyone who joined earlier and confirmed the address receives a single email inviting them to register. Stored are the email address, the time of the entry, the source page and the status (confirmed, unsubscribed). The legal basis is the consent given when joining (Art. 6(1)(a) GDPR). Unconfirmed entries are not contacted.

All waitlist entries are deleted 90 days after that invitation email. Unsubscribing remains possible through the link in the invitation email and in earlier waitlist messages, without an account or sign-in; this withdraws consent at any time. After unsubscribing, the address is not contacted again and is removed with all other entries. For confirmed entries we also prepare an account that is not active yet, under the same address; the invitation email carries the link to activate it. Nobody can sign in before the person confirms the address, chooses a password and agrees to the privacy policy and the terms through that link. An account that is not activated is deleted 90 days after that email.

Processing is based in particular on contract performance, pre-contractual measures, legal obligations and legitimate interests in operating the application securely.

Users may request access, rectification, erasure, restriction of processing, data portability and objection where the statutory requirements are met.

4. November 2026