Your documents stay in your browser. MARS stores documents, folders, and review threads in this browser's IndexedDB storage. They are never sent to the Secutils.dev server in readable form. Clearing site data for this page deletes them, so use Export all for backups.
Short links. When you copy a short link, your browser encrypts the document and Secutils.dev stores only the encrypted copy, for the period you choose (1, 7, or 14 days). The decryption key exists only in the link, so the server can't read the document. Only the browser that created a link can delete it early. Your IP address is kept for one hour to rate-limit link creation.
Full links. A full link carries the whole document in the URL fragment (#…), which browsers never transmit to the server.
Loading from a URL. When you use ?url= or the "Load URL" box, your browser fetches that address directly; the Markdown is never relayed through the Secutils.dev server.
Map basemaps. GeoJSON and TopoJSON viewers fetch map tiles directly from OpenStreetMap. Tile requests reveal the displayed geographic area. Your Markdown source is not included.
Anonymous usage analytics. We use Plausible Analytics, a privacy-first, GDPR-compliant tool, to collect aggregate usage data. No cookies, no personal data, no individual tracking. Full details in the Plausible Data Policy.
See the full Secutils.dev privacy policy for details on the wider service.