Everything stays on your Mac.

Nothing. There are no accounts, no sign-in, no analytics, no crash reporting and no telemetry. Simple MarkUp has no network code in it anywhere — not in the Safari extension, not in the Mac app — so nothing in it sends anything about you, your machine or the pages you visit anywhere.

When you switch Simple MarkUp on for a page, it reads that page: the text you highlight, and where the things you marked sit in the document. If you open the Markup elements list, it also reads the name of each block on screen, as a screen reader would — headings, paragraphs, list items, images, links, buttons, fields and other blocks — to list them for you to choose from. It is built on your Mac and shown only in Simple MarkUp’s panel; the list is read again as you move through the page, and gone when you close it. The name of something you mark is kept with that mark, on your Mac, for as long as the mark is. Only what you then mark goes into the brief: the text you highlighted, a way of pointing back at what you marked, a short piece of its own text or label so you can tell which one it was, and the notes you typed. The brief also records three things about the page itself — its address, the time you made the capture, and the size of the window you were reading in. It reads only a page you have switched it on for, only while it is on, and nothing it reads leaves your Mac.

One thing to know about notes. A note is typed into the page you are marking up, and that page can see — and interfere with — what you type or paste into it. So a site that records typing, as some analytics tools do, could record your notes about it, and a page could change what ends up in a note: read your notes before you send the brief. Simple MarkUp itself does not send them anywhere. A later version moves note-typing out of the page.

The brief carries the page’s full address, including anything after a ? or a #; a few characters, such as spaces and brackets, are written in their % form, and only a very long address (over about 300 characters) is cut short. On most pages that is unremarkable. On a page you reached from a sign-in link, a password reset or a shared document, the part after the ? or the # can be a key that works for anyone holding it — so it is worth a glance before you paste a brief somewhere.

Simple MarkUp does not trim the part after the ?, on purpose. On sites that route by query the part after the ? is which page you are on, so a brief that quietly named a different one would be worse than a brief you can read. A filter that caught most secrets would be worse still — it would teach you to stop looking, and whatever it missed would then be trusted.

Simple MarkUp runs only on the page you turn it on for, and only while you have it on. Until then nothing of it is present on that page at all; the moment you ask, it puts itself onto that one page and nowhere else.

The extension asks Safari for four permissions and no others. activeTab lets it touch the page you turned it on for, and only that page. scripting is what lets it put itself there when you ask — it is not permission to reach any particular site. storage is where your marks are kept while you work, along with whether you had the Markup elements list open (in a Private window, in that tab’s memory instead, until it reloads or goes to another page — a site that switches pages without reloading keeps them — and never in Simple MarkUp’s own storage), and, while a “can’t run here” window is open, which window that is and why, with no page address. nativeMessaging is how it hands an export over to the Mac app. It asks for no site access at all: there is no list of websites in it, not even a wildcard.

Your brief is two files: an annotated screenshot and a markdown description. Both are made on your machine and go where you send them — onto the clipboard when you press Copy Screen or Copy Prompt, or into a folder you choose when you press Export. Each export is a new pair, named for the moment you made it; it never writes over an earlier one. While an export runs, the app keeps a working copy in its own storage (see clause 09). Simple MarkUp puts them nowhere else it hasn’t already told you about.

Because nothing is collected, there is nothing to use, share, sell or disclose. Simple MarkUp does not sell or share personal information with anyone, for any purpose, including advertising.

Simple MarkUp contains no analytics, advertising or tracking code of any kind, and nothing in it phones home. It contains no third-party code at all: everything it runs was written for it.

Outside the app one company is involved, and not by the app itself: Apple, whose App Store delivers it and whose macOS checks its signature when you install it. That check is your Mac's own, made for anything from the store; Simple MarkUp plays no part in it, and Apple's own privacy policy covers it.

There are none. Simple MarkUp does not track you across pages, apps or websites, contains no advertising, and shows no App Tracking Transparency prompt because there is nothing to ask you about.

Simple MarkUp does not talk to any AI. It makes a brief and hands it to you. If you paste that brief into Claude, ChatGPT or anything else, that is your action and your relationship with that service — what they do with it is covered by their privacy policy, not by this one.

Simple MarkUp is not directed at children, and collects no personal information from anyone, including children under 13.

Because nothing is collected, none is retained by us, and there is nothing to request the deletion of. There are no accounts to delete.

On your Mac, two small things are kept from one launch to the next, and even after you remove the app, until its folder goes: the last folder you exported a brief to, so the panel can open there rather than somewhere arbitrary, and whether the Safari extension was on the last time the app checked, so the app’s own window can tell you without a blank moment each time you open it. The folder is a permission slip issued by macOS rather than a path we keep, and it never authorises a write on its own — every export still goes through the panel. The other is a single yes-or-no about your own extension; it is not about you, the pages you visit or anything you marked, and the app updates it the next time you open its window. Your marks, and whether you had the Markup elements list open, are held for the browsing session that made them and no longer; after Clear all, an empty entry stays until you quit Safari, so another tab cannot write the cleared marks back. In a Private window, marks live only in that tab’s memory, until it reloads or goes to another page (a site that switches pages without reloading keeps them), and never shared with your other windows. While a “can’t run here” window is open, storage also holds which window that is and why, with no page address; that is removed when the window closes, and gone the same way as everything else in it once you quit Safari. An export’s working files are deleted when it finishes. The app keeps a small record of each export’s outcome — whether it worked, and the folder and file name it went to — for at least a day, so the extension can report back; so does the working copy of an export that never finished, which holds the brief itself (the page address, highlighted text and notes) and the screenshot. Both are removed once they are a day old and you next open the app or start an export. Exports are not affected by a Private window: the app cannot tell one from any other, and keeps the same records either way. The briefs you exported are yours and stay in the folders you put them in.

As with any Mac app you remove, macOS leaves its folder in your Library behind. Simple MarkUp’s holds the bookmark and the on-or-off answer, and both go when the folder does. Besides the bookmark and the on-or-off answer, it can hold what recent or unfinished exports left behind, described above, until they are a day old and you next open the app or export.

Simple MarkUp never sends or fetches anything over the network. There is no network code in it, in the app or in the Safari extension.

For completeness: the app and the extension are both sandboxed by macOS. The app declares five capabilities — the sandbox itself; permission to read and write the files you pick in the export panel; permission to remember the folder you last picked; a shared container it uses with the extension to hand an export over; and com.apple.security.network.client. The extension declares two: the sandbox and the shared container. The network permission is there for a technical reason, not because the app connects to anything: macOS draws the app’s own window with WebKit, which loads even the app’s bundled page through its networking process, and without the permission the window stays blank. Nothing in the app or the extension uses it to send or fetch anything.

got2.app loads no fonts, scripts, images or stylesheets from anywhere else, and sets no cookies of ours. We run no analytics, so nothing we put here counts you, follows you between pages, or records what you read.

The pages are served through Cloudflare. Like any web host it sees the request itself — your IP address, the page you asked for, and the time — because that is what serving a page consists of. We add nothing to that. There is no account to make here, no analytics of ours, and nothing we install that would follow you. What Cloudflare keeps of those requests, and for how long, is governed by their privacy policy rather than by us — we can promise what we do not do, not what a host does not retain.

On Simple MarkUp's pages, every link that leaves this site goes to Cloudflare, and nowhere else — the policy linked above. Following it is a request to that company, not to us.

The other links here are email addresses. Clicking one opens your own mail app with the address filled in — nothing is sent, and nothing about it comes back to this site.

If this ever stops being true, this page changes before the software does.

simple-markup@got2.app

Ask for launch updates and we add your address to our launch list, and use it for nothing else. The list is kept with Buttondown, which sends it. Every email says who it is from and carries an unsubscribe link, and we don't track whether you open it or what you click. Ask to come off and you are off.