Privacy Policy
1. Overview
This privacy policy explains how Leafblade processes personal data when you use our website. Leafblade has no user accounts, no payments, no tracking and no analytics — your documents are never stored on our servers, and the only personal data we process is the technical connection data described below.
2. Data Controller
Lorenzo Melchior
Sonnenallee 141
12059 Berlin, Germany
Email: [email protected]
3. Hosting and Content Delivery
This website runs on a server operated by us in Germany. All traffic is routed through the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which acts as a reverse proxy and protects the site against attacks. Cloudflare processes connection data (e.g. your IP address) for this purpose.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
Data transfer to the USA: Cloudflare is certified under the EU-US Data Privacy Framework and additionally relies on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. See Cloudflare's Privacy Policy.
4. Document Processing
The Markdown text and images you provide are transmitted to our server solely to generate your PDF document. This data is not stored and is discarded immediately after the conversion completes. No document content is retained on our servers.
Legal basis: Art. 6(1)(b) GDPR (providing the service you requested).
5. Server Logs and Rate Limiting
Our server automatically records technical information about each request:
- IP address
- Time of request
- Requested URL and response status
- Browser type and version (user agent)
Your IP address is also held in memory for up to one hour to limit the number of conversions per hour per user. This data is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation and abuse prevention).
6. Data Retention
- Document content (Markdown, images): not retained — discarded immediately after PDF conversion.
- Server logs (IP address, request data): automatically deleted after 14 days.
- Rate-limit counters (IP address): deleted after one hour at the latest.
7. Cookies and Local Storage
This website does not set cookies and does not use tracking or analytics tools. We only use your browser's local storage (localStorage) to save your editor settings and Markdown text between visits. This data never leaves your browser.
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
To exercise your rights, contact us at [email protected].
9. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Germany
www.datenschutz-berlin.de
10. Changes to this Policy
This privacy policy is current as of October 2026. We may update it as the service evolves or legal requirements change.