We collect nothing about you.
No accounts, no telemetry, no crash reports, no analytics and no update check. Your files stay where you keep them.
The tool and libraries
Your files stay on your machine or wherever your project lives. Milleleaf needs no server of its own and sends your files nowhere. LibreOffice and the ArtCraft apps run on your machine as local programs.
The network is used only when you ask for it, and only to services you choose: a time-stamp authority or OpenTimestamps calendar you name (only a hash is sent), and public Bitcoin block headers for online verification. Each reveals your IP address to the service you contact. There is no default time-stamp service.
This website
The site is static files served by Cloudflare, which handles each request (your IP address and browser details) to deliver the page. Cloudflare request logging and Web Analytics are off. Cloudflare still shows us aggregate counts (how many requests, their status codes and which of our addresses), not who made them. The site loads no third-party scripts, fonts or trackers.
If you pick a light or dark theme, your browser remembers it (localStorage, milleleaf-theme). It never leaves your browser.
The demos
Files you drop are read and processed on your own device by the document engine, running as WebAssembly. The demo pages block every network connection after the page loads, so a file cannot be sent anywhere. Automated checks load a demo, go offline and run every operation, with zero network requests after loading.
Questions and changes
Questions about privacy: hello@milleleaf.com.
Any change to this policy is made in the repository, so its history is public.