Privacy

Last updated 12 October 2026

What we can't see

Link and private artifacts are encrypted on your machine before upload. The key stays in the part of the link after #, which browsers don't send to us, or is sealed to the people you share with. We store the encrypted bytes and can't read them. Your sharing keys are locked with your master password, which never leaves your browser or terminal.

What we store

• Your email address and an account id, from signing in with Google, GitHub or an email link. Google and GitHub give us only your name and email address; we keep the email.
• Your public keys, and your private keys encrypted under your master password.
• For each artifact: its encrypted versions, who it's shared with, its limits (expiry, number of opens) and how many times it was opened.
• Public pages, which you choose to publish unencrypted, with their title and description.
• Abuse reports: the artifact, the reason given, and the key if the reporter included it, so we can check the report.
• A salted hash of your IP address for rate limits, not the address itself.

Our hosting provider, Google Cloud, keeps request logs, which include IP addresses, for up to 30 days. Sign-in runs on Firebase Authentication.

What we don't do

No ads, no tracking scripts, no analytics, and we don't sell or share your data. Artifact pages run in a sandbox without cookies or storage.

Deleting things

madal delete removes an artifact and every version of it. Anonymous links expire after 7 days. madal account delete, or Delete my account on the keys page, removes your account, your keys and everything you published.

Contact

Questions or requests: open an issue at github.com/pa/madal-releases.