markable

Privacy Policy

This is a courtesy translation for your convenience. Only the German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Julian Laibach
Wessenbergstraße 32
78462 Konstanz
Germany
Email: support@gomarkable.app

2. Hosting and server log files

This website is hosted by a server in Germany. When you visit the website, the server automatically processes information in so-called server log files (e.g. IP address, date and time of access, page requested, browser type). This data is technically required to deliver the website and to ensure its stability and security (Art. 6 (1) (f) GDPR). It is not combined with other data sources; the log files are deleted automatically after a short period.

3. No cookies, no tracking

This website does not use cookies for analytics or marketing purposes and does not use any tracking or analytics services.

4. Contacting us

If you contact us by email or phone, the information you provide is stored by us for the purpose of handling your enquiry and in case of follow-up questions (Art. 6 (1) (b) and (f) GDPR). We do not pass this data on without your consent and delete it as soon as it is no longer required for processing and no statutory retention obligations apply.

5. Your rights

With regard to the personal data concerning you, you have the following rights vis-à-vis us: the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

6. SSL encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the lock symbol in your browser's address bar.

7. Additional information

The following information applies to the markable browser extension and the associated service at api.gomarkable.app.

Use without an account

Without an account, markable works exclusively locally in your browser. Projects, comments, your name and settings are kept in the extension's storage (chrome.storage.local) and are not transmitted to us. Full-page screenshots are also created locally and are automatically removed from the browser after 24 hours. You save exports (JSON, Markdown, CSV, PNG, PDF) yourself on your device.

So that comments stay attached to elements of a web page, the extension reads features of the selected element on the page where you activate it (e.g. identifiers, position, a short text excerpt or an image URL). On pages where markable is not active, the extension does not process any content.

Account and sign-in

You only need an account to share projects or to accept an invitation. In that case we process your name, your email address, one sign-in token per device and the time of sign-in (Art. 6 (1) (b) GDPR).

  • Email code: We send you a six-digit code by email. It is valid for ten minutes and can only be used once.
  • Sign in with Google, Microsoft or Apple: You are redirected to the respective provider (Google Ireland Limited, Ireland; Microsoft Ireland Operations Limited, Ireland; Apple Distribution International Ltd., Ireland). After your consent we receive your name, email address and an identifier of your account. A transfer to the USA cannot be ruled out; the providers are certified under the EU-US Data Privacy Framework. Their privacy notices also apply.

Shared projects

In shared projects we store the content that you and the other members create: project name and domain, comments and replies with name and time, category, priority, resolved status, the page URL and the features of the commented element. Invitations contain the email address of the invited person and expire after 30 days. Members of a project see the comments, names and – while they work at the same time – the cursors and selection frames of the others. Cursors and selections are only transmitted live and are not stored.

The data remains stored as long as the project or your account exists. The person who created the project can delete the project and individual comments. You can request the deletion of your account at any time by email to support@gomarkable.app.

Payments via Stripe

You purchase unlocks via Stripe Managed Payments. Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland) acts as seller and payment processor, processes payment data, billing address and tax information under its own responsibility, sends receipts and carries out fraud checks. We only receive the confirmation of the purchase, the amount and an identifier of the transaction from Stripe in order to book your unlock (Art. 6 (1) (b) GDPR). We keep purchase records within the statutory retention obligations (Art. 6 (1) (c) GDPR). Stripe's privacy notice: stripe.com/privacy.

Emails

We only send you emails that are necessary for the service: sign-in codes, invitations and notices about your account. We do not send newsletters or advertising.

Abuse protection

To protect against abuse, we limit the number of requests per account and IP address and the number of comments per user (Art. 6 (1) (f) GDPR).