Privacy policy

Data collection and retention

Rendr does not collect analytics, create accounts, track users, or send document contents to an external service. Rendr does not collect or retain user data, so the developer has no Rendr-held account or user data to provide, retain, or delete.

Rendr does not operate a diagnostic, crash-report, or log-upload service. It does not add application logging that contains document contents or full local paths.

Documents and local files

Rendr previews Markdown files selected by the user from Finder, the Open panel, or macOS file-open requests sent to Rendr.app. Local exports are written only to destinations selected by the user.

Document-relative images and media load only within the document folder or a containing folder selected by the user. Folder access lasts for the document session unless the user explicitly chooses to remember it with a security-scoped bookmark.

Remote content and network access

Preview rendering blocks remote images and media by default. The user can turn off that default in Preferences, allowing remote images and media to load automatically in newly opened document sessions, disclose the user's IP address, and contact third-party servers. Otherwise, remote images and media load only with temporary permission for the current document session.

Remote scripts, styles, fonts, frames, and arbitrary network fetches stay blocked through Rendr's content security policy. Markdown links using reviewed web and email schemes are opened by macOS only after the user activates the link.

Quick Look, printing, and exports

Finder Quick Look previews use an embedded sandboxed extension and the same bounded static renderer. The extension reads only the file supplied by the Quick Look host and has no network entitlement.

Printing and PDF export use the current document's remote-content permission and may load permitted remote images or media. HTML export and Quick Look never load remote resources.

Custom stylesheets

The user may select one local CSS file in Preferences and can optionally save a security-scoped bookmark for that file. Rendr reads at most 256 KiB, rejects imports, URLs, resource-producing functions, unsafe HTML delimiters, and malformed token boundaries, and applies approved CSS after the built-in theme.

The stylesheet can be disabled, revealed, replaced, or removed at any time. It is never downloaded by Rendr and does not enable remote resources.

Source editor handoff

The user may explicitly choose a source editor in Preferences. Direct editor presets store one security-scoped bookmark and filesystem identity for the selected executable. Xcode stores no editor permission. Rendr asks macOS Launch Services to open the current Markdown document in the installed application identified as Xcode.

Only after the user chooses Reveal in Editor does Rendr attempt the handoff with the current Markdown file. Direct presets use fixed arguments containing the file and trusted source coordinates. Xcode receives only a native document-open request with no command-line arguments. Rendr does not invoke a shell, accept command strings, evaluate terminal text, search PATH, use AppleScript, or launch an editor automatically. The macOS sandbox may block a direct executable handoff even after the selected permissions and identities validate. Copy Source Location remains available without editor access.

Apple diagnostics

Apple may make aggregate diagnostics and crash information available to the developer only for App Store users who choose to share it with Apple and developers. This is not a direct report from Rendr, does not include a Rendr document-upload path, and may be unavailable for low-volume events.

Revoking local permissions

Permissions and remembered choices remain under the user's control:

• Use the File menu to revoke document folder or folder-navigation access and remove any saved bookmark.
• Use Preferences → Appearance to disable, replace, or remove a custom stylesheet.
• Use Preferences → Behavior to replace or remove the selected source editor.
• Use Preferences → Privacy to block remote images and media by default for newly opened document sessions.