Privacy.
Imark reads files on your Mac and renders them there. There is no account, no analytics, and no server of ours for anything to reach. This page names the one request the app makes, and everything it writes.
Updated
The one request, and how to stop it
Once a day at most, Imark asks api.github.com for the latest release of Imark and reads one field of the answer: the version number. Nothing about you travels with it, and nothing about your documents does. GitHub sees what any web server sees when you fetch a file — your IP address and the request itself.
To stop it, choose Imark > Settings and turn off “Check for new versions once a day” under General. Imark reads that setting before it builds the request, so off means the app makes no network requests at all. Choosing Imark > Check for Updates still asks, because you asked.
It is one file of the app, and you can read it: Updates.swift. It is the only place in Imark that touches the network.
What Imark never sends
There is no analytics, no crash reporting, no usage tracking, no account, and no licence check. Your documents are never uploaded — not to render them, not to build the outline, not to search them, not to translate them.
Imark collects no personal data, which means there is no profile to see, correct, export, or delete. Nothing about you exists to ask for.
You do not have to take that on trust. Imark is open source under the MIT licence, and the whole app is one Swift package you can search.
The documents you open
Imark reads the file you open, the other Markdown files in its folder so it can list them in the sidebar, any file a [[wiki-link]] points at, and the images the document refers to. That is the whole of it.
Rendering happens in a web view that cannot reach the network. Imark serves the page over a private imark:// scheme, under a content security policy of default-src ‘none’, so a document carrying a remote image, a tracking pixel, or an external script loads none of them. The fonts for maths are inside the app. A confidential document renders the same way with Wi-Fi off.
The Quick Look extension runs in Apple’s sandbox with read-only access to the file you previewed, and renders it with the same engine.
What Imark writes, and where
Everything stays on your Mac. Nothing here is sent anywhere.
| Where | What, and when |
|---|---|
| The .md file you are reading | Only when you comment. The note becomes an HTML comment inside the document, signed with the name in Settings and the time. Imark writes a temporary file beside the original and moves it into place, and it keeps the last ten states of the document, so ⌘Z puts any of them back. |
| ~/Library/Preferences/pt.miguelsilva.imark.plist | Your settings: theme, text size, column width, the name your notes are signed with, your search engine, and whether the version check runs. |
| ~/.imark/pending | Only while a coding agent waits for a review: which document it asked about, and what you decided. Deleted once the agent reads it. |
| ~/.claude/skills, ~/.claude/commands, ~/.codex/skills | Only if you accept the offer to set up the coding agents on your Mac. The alert names every file before Imark writes one, and a later version rewrites only the copies you left untouched. |
| The macOS recent documents list | The last files you opened, in the standard list every Mac app uses for File > Open Recent. |
Your notes are signed with your macOS account name until you change it in Settings > Comments > Sign notes as. That name goes into the document, so whoever you send the file to can read it.
Three things only you can start
Search the web for a selection opens your browser at the search engine set in Settings — Google, unless you choose DuckDuckGo, Bing, or Kagi — with the selected text in the address. That text leaves your Mac, and it goes where you sent it.
A link in a document opens in your default browser, the same as a link anywhere else.
Translate a selection uses the translation built into macOS, and only with language packs already installed on your Mac. Imark asks for an installed pair, so nothing downloads and nothing is sent; if the pair is missing, Imark says so and stops. This one needs macOS 26 or later.
This site
imarkmd.com sets no cookies and runs no analytics. No fonts, scripts, or images come from anyone else’s server, so reading a page here contacts nobody but this site. The version number and the download size come from the GitHub API, fetched by our server when the pages are built — not by your browser.
The site is hosted on Vercel, and the download itself comes from GitHub. Both keep the ordinary logs a web server keeps: your IP address, what you asked for, and when. What they keep and for how long is theirs to state rather than ours — Vercel’s privacy policy and GitHub’s privacy statement say what each of them does.
Changes, and reaching a person
If any of this stops being true, this page changes in the release that changes it, and the date at the top moves.
There is no support address, because there is no company. Open an issue and a person answers. If it looks like a security problem, send it as a private security advisory instead. About Imark says who that person is, and the terms cover the licence.