Privacy Policy
Last updated: July 22, 2026 — Ginylil
Read how depapel handles Markdown you convert into PDF, Word, or copy-ready output.
Who we are
depapel is a Markdown conversion service operated by Ginylil. Contact us at support@ginylil.com.
Content processing and retention
Submitted content is processed only for the request lifecycle to produce the requested PDF, DOCX, import result, copy-ready output, or Mermaid image contract. We do not store document content and we do not log document content. DOCX import stays request-scoped in memory. PDF import may use request-scoped temporary files for helper binaries, and those files are deleted before the response completes.
Local drafts
Draft Markdown, theme, and editor state may be stored locally in your browser. Imported drafts containing inline image assets remain only in the current tab and are not written to browser local storage.
Operational metadata
For abuse prevention and service operations, we collect limited first-party operational metadata: event type, route path, output surface, conversion status, format, theme, processing duration, input/output byte size, PDF page count, image count, diagram count, coarse browser family, coarse device class, a hashed client identifier, bounded UTM campaign tokens, and the referring hostname. We do not keep document content, raw IP addresses, raw user-agent strings, or the full referring URL, path, query, or fragment.
The hashed client identifier is derived from the IP address using HMAC-SHA256 with a private secret. Operational logs are retained for up to 14 days.
Recipients
Operational metadata is available only to Ginylil operators and, when private alerting is enabled, the service used to deliver alerts to a private Telegram alert channel. Alerts may include the generated download filename but do not include document content.
Your controls
You can clear locally stored drafts by clearing depapel site data in your browser. Contact support@ginylil.com with questions about operational metadata or these practices. Because server-side document content is discarded with the request lifecycle, it cannot be retrieved or deleted after the request completes.
Other practices
We do not require an account, use tracking cookies, serve third-party advertisements, sell data, share document content with advertisers or analytics providers, or intentionally request profile information.