Privacy Policy

Last updated: September 2026

1. What we collect

• Account data (Pro sign-in): your email address and a password. Passwords are stored only as salted hashes; we never see or store them in plaintext. Email verification codes are sent to your inbox and are not retained beyond verification.
• Google sign-in: if you choose “Continue with Google”, Google shares your email address and Google account identifier with our backend to create or sign you into your JingMark account.
• Pro subscription state: whether your subscription is active, and the plan tied to your email. Billing itself is handled by a third-party payment provider; we do not receive or store your credit card number.
• Device identifier: a random ID generated on first run and stored locally, sent with sign-in requests so we can recognize your signed-in device and protect your account.
• Web page content you choose to convert: JingMark can convert a web page, a link, or selected text into Markdown when you explicitly ask it to (right-click menu or the address box). The page text, images, and links are read and converted on your own browser. We do not upload this content to our servers.
• WeChat Official Account credentials (optional): if you connect your own WeChat Official Account, you provide an AppID and AppSecret. These, together with a short-lived access token, are stored only in your browser’s local storage and used solely to call the WeChat API on your behalf. Our backend never sees your AppSecret.

2. How we use your data

• Authenticating your account and verifying email ownership.
• Checking and syncing your Pro license state so Pro features work across your devices you sign in on.
• Converting the web content you explicitly open into Markdown, entirely in your browser.
• Sending transactional email (verification codes, license receipts) when you request it.
• We do not sell your data, do not use it for advertising, and do not track your browsing.

3. File and web content access

JingMark reads and writes only the folders you explicitly authorize through the File System Access API, and only the web pages you explicitly choose to convert. You can revoke folder access at any time from your browser’s site settings. We never scan, index, or collect your files or browsing history in the background, and we never read content outside what you ask us to process.

4. Payments

Pro purchases are processed by a third-party payment provider. JingMark never stores your card details, billing address, or full transaction history; payment information is handled entirely by that provider under its own privacy policy. We only learn that a subscription tied to your email is active, expired, or cancelled.

5. Data sharing

We share data only with the services needed to run JingMark, and only as described below:

• Our backend (jingmark.xyz): email, hashed password, Google account ID, and subscription state, used for authentication and licensing.
• Google: when you sign in with Google, your email and account identifier are exchanged with Google to complete OAuth.
• WeChat Open Platform API (api.weixin.qq.com): only after you connect your own Official Account, to obtain an access token and read or publish drafts on your behalf using the credentials you supplied.
• Payment provider: your payment details, under that provider’s own privacy policy.

We do not sell, rent, or otherwise disclose your personal data to any third party for marketing or advertising.

6. Storage and retention

• On your device: your Markdown files, extension settings, WeChat credentials, and the device identifier. Clearing the extension data removes all of these.
• On our backend: account credentials and subscription state. We keep this for as long as your account exists.
• We do not retain the content of the web pages you convert; it is processed in memory and not logged.

7. Deleting your data

You can delete all local data at any time by removing the JingMark extension from your browser. To delete your account and the personal data we hold on our backend, email [email protected] from your registered email; we will delete your account, email, and subscription records within 30 days.

8. Security & rendering

All Markdown rendering and export happen locally. Every render is sanitized, and all third-party libraries are bundled inside the extension and loaded under a strict Content Security Policy; no remote scripts are executed. Passwords are transmitted over HTTPS and stored as salted hashes.

9. Children

JingMark is not directed at children under 13 and we do not knowingly collect their data.

10. Changes

We may update this policy and will post the new version, with a revised “Last updated” date, on this page. Material changes will be announced in the extension.

11. How to contact us

Support & legal contact: [email protected] (replies within 2 business days).