This site sets no cookies, stores nothing on your device and runs no analytics. It makes three outbound requests, all to GitHub: one for the current app release, one for the current release of the Claude skill that reviews Monoleaf files, and one for the current release of the web version. Everything below is the detail behind those sentences.
The controller for the purposes of the GDPR is the person named in the imprint.
The download section shows the current version number and links to the installer, the "Reviewing with Claude" note does the same for that skill's release, and the web-version link does the same for the browser build. To do that, the page asks the GitHub API for each project's latest release when it loads:
GET https://api.github.com/repos/vibingbiochemist/Monoleaf/releases/latest
GET https://api.github.com/repos/vibingbiochemist/Monoleaf-reviewer/releases/latest
GET https://api.github.com/repos/vibingbiochemist/Monoleaf_web/releases/latest
Each request necessarily tells GitHub your IP address, the time, and which page asked. All three carry no key, no identifier and no cookie, and nothing is sent back to this site. GitHub, Inc. is a Microsoft company based in the United States and processes the requests under its own privacy statement.
The legal basis is Article 6(1)(f) GDPR, our legitimate interest in showing you version numbers that are actually current rather than ones baked in at publication and quietly wrong. If you would rather not make any of these requests, the download links on the releases page, on the skill's releases page, and on the web version's releases page work without them.
The site is hosted by goneo Internet GmbH, Dresdener Straße 18, 32423 Minden, Germany, on servers in Germany. Like any web server, the host records requests, which includes your IP address, the time, the page requested and your browser's user agent. That is technically necessary to deliver the page and to keep the service secure and available, again under Article 6(1)(f) GDPR. Those logs are the host's, not ours, and we do not read, receive or combine them.
Links to the repository, to issue tracking and to licence texts open other people's sites. Once you follow one, that site decides what it collects. Nothing is transmitted to them until you click.
Monoleaf runs on your machine. It has no account system, no sync and no telemetry, and your documents are never transmitted anywhere. Images referenced from the web are left unloaded unless you switch them on, precisely so that opening a document cannot report back to whoever sent it.
Under the GDPR you may request access to your personal data and its correction, erasure or restriction, object to processing based on legitimate interest, and lodge a complaint with a supervisory authority. In practice this site holds nothing about you to act on: the only records that exist are the host's server logs described above.
For anything relating to this site, write to info@monoleaf.org. The contact details are on the imprint page.
If the site starts doing something new, this page changes with it. There is no version history here yet because there has been nothing to revise.