Privacy Policy

This policy explains what information ReMarkSync handles when you use the website, desktop app, account, trial, or paid subscription. It also explains what stays on your computer, which service providers are involved, and how to contact us about your data.

At a glance

• Your notes, handwriting, PDFs, attachments, and document names are processed on your computer and never sent to ReMarkSync's servers as part of the sync process.
• Selected notes are sent from your computer directly to the Microsoft account you connect.
• ReMarkSync's servers store the information needed to manage your account, license, subscription, security, and activated computers.
• ReMarkSync's baseline website analytics is limited and cookieless. Optional Google Analytics and Google Ads measurement stays off until you allow the relevant category.
• Meta advertising measurement follows a regional privacy setting. It remains off until you allow it in consent-required or unknown locations; in a legally reviewed opt-out location it may start by default and can be turned off at any time.
• ReMarkSync does not sell personal information or send note content to advertising services.

Contents

• Information ReMarkSync collects
• Information that stays on your computer
• Website analytics
• Optional Google and advertising measurement
• Optional desktop analytics
• Service providers
• How long information is kept
• Your privacy rights and choices
• Security

Who operates ReMarkSync

ReMarkSync is operated by Adnane Miliari in Morocco. Adnane Miliari is the data controller for personal information processed directly by ReMarkSync.

For questions or privacy requests, email support@remarksync.com.

How your notes reach OneNote

The official reMarkable desktop app first syncs your notes to your computer through reMarkable's service. ReMarkSync processes the notes you select on that computer and sends them directly to the OneNote account you connect.

Your note content does not pass through ReMarkSync's servers. ReMarkSync's servers handle account sign-in, trials, subscriptions, licenses, and activated computers. They receive only the information needed to provide those services.

Information ReMarkSync collects

Account and sign-in information

ReMarkSync processes:

• Your email address and an internal account identifier.
• Records used to send and verify one-time sign-in codes, including the number of attempts and when a code expires.
• Protected session credentials and information about whether your session is active.

ReMarkSync's servers do not store raw refresh credentials.

License and activated-computer information

ReMarkSync processes:

• A generated identifier for each activated computer.
• Activation status and the date a computer last connected to the service.
• Trial dates, plan information, subscription status, and the features included with your plan.

The generated computer identifier is used to apply the two-device limit and manage your license.

Billing information

Polar acts as the merchant of record and handles checkout, payment details, invoices, taxes, refunds, and billing communications.

ReMarkSync receives the billing information needed to provide access to the app. This can include your account email, customer and order references, subscription status, plan, renewal date, cancellation date, and refund status.

ReMarkSync does not receive or store your full payment card details.

Information you send to support

If you contact support, ReMarkSync receives the information included in your message and any files you choose to attach.

Diagnostic logs remain on your computer unless you export and send them. Names and local paths are hidden by default in a diagnostic export. The app lets you include them when they are needed to investigate a problem, but only if you choose that option.

Please review diagnostic files before sending them and do not include note content or unrelated personal information.

Information that stays on your computer

The following information remains on your computer unless you deliberately share or sync it:

• Your notes, handwriting, PDFs, attachments, document names, and document content.
• The Microsoft access tokens used to connect to OneNote. They are stored using protections provided by Windows or macOS.
• Local ReMarkSync settings and preferences.
• Diagnostic logs, unless you export and send them to support.

Your website theme preference is stored locally in your browser when you change between light and dark themes.

ReMarkSync does not ask for your reMarkable account password and does not connect directly to your tablet.

Website analytics

ReMarkSync uses Cloudflare Web Analytics to understand aggregate website traffic, devices, referrers, and performance. Cloudflare Web Analytics does not use cookies or browser storage for analytics.

ReMarkSync sends a reviewed set of website interactions to PostHog Cloud EU for product and website analytics. The same reviewed interactions are also sent to a same-origin Cloudflare Worker, which stores them in Cloudflare Workers Analytics Engine, and to Cloudflare Zaraz for operational comparison. PostHog is configured in always-cookieless mode, without advertising profiles, session recordings, heatmaps, automatic interaction capture, or durable browser identifiers.

The website can record events such as:

• The public page visited, including documentation, and its page category.
• A download platform or computer architecture selected.
• A download help, button, or support link clicked.
• An FAQ item opened or an FAQ navigation link selected.
• A demo video opened, started, reached a 25%, 50%, or 75% milestone, completed, closed, or failed to load.
• For a closed demo, the rounded completion percentage and close method.
• A section reached or a scroll threshold passed.
• Approved campaign labels included in a link and retained for that browser tab session.

Before a website interaction event is sent, ReMarkSync removes referrers, raw pathnames, and unapproved query parameters. Pageview events contain only the ReMarkSync origin and a reviewed page category. Only the event fields needed to understand website use are included.

A fresh random identifier groups interactions during one browser tab session so page-to-page funnels can be measured. It is stored only in sessionStorage, is not connected to an account, and is removed by the browser when that tab session ends. Sanitized campaign labels are also stored for that tab session so visits to documentation and download pages can be attributed to the same campaign. An explicit analytics opt-out clears both.

Cloudflare and PostHog website analytics are disabled when your browser sends a Do Not Track or Global Privacy Control signal. If you explicitly opt out on this website, ReMarkSync stores that preference in your browser so all website analytics systems remain disabled. The preference is not sent to an analytics provider.

This cookieless website analytics operates separately from optional Google Analytics and the Advertising category described below. Rejecting those optional categories does not change the site's cookieless analytics behavior.

Optional Google and advertising measurement

ReMarkSync uses a custom privacy-choice interface with Google Consent Mode v2. Google Analytics, Google Ads, and Google Tag Manager remain blocked until you make a choice that allows Google Analytics or advertising measurement. The default values for analytics_storage,ad_storage, ad_user_data, and ad_personalization are denied. ReMarkSync also keeps Google advertising personalization disabled, enables ads-data redaction, and does not use URL passthrough.

If you allow Google Analytics, ReMarkSync can send a query-free page location and the same reviewed page and interaction events described in the Website analytics section to Google Analytics 4. Event properties remain allowlisted. Note content, document names, email addresses, Microsoft identifiers, diagnostic information, and local paths are not included. Google Analytics may set first-party analytics cookies after permission is granted.

If you allow advertising measurement, Google Ads may use first-party storage and approved ad click information to attribute a permitted download selection to an advertisement. A download selection is an intent signal only; it does not prove installation or a trial start. ReMarkSync does not enable remarketing or personalized advertising through this website measurement setup.

Google Tag Manager is a delivery container, not permission to collect arbitrary data. Only reviewed Google and Google Ads tags may be added. Automatic enhanced measurement remains off, user-provided data is not enabled, and new tags must pass consent and event-allowlist review before publication.

Google may receive ordinary network information, such as an IP address, browser information, timestamp, and page context, when a permitted Google tag sends a request. Google determines how long it retains and uses information under its own policies. See Google's Privacy Policy and Business Data Responsibility information.

Meta advertising measurement

ReMarkSync uses Meta Pixel and Meta Conversions API to understand whether ads on Facebook or Instagram lead to visits to the main product page or a real selection of a macOS installer or Microsoft Store link. A same-origin ReMarkSync endpoint uses Cloudflare's request country code to select the applicable advertising privacy mode. ReMarkSync does not store that country code as part of a Meta event payload.

In a consent-required location, advertising measurement remains off and the Meta script is not downloaded until you enable Advertising measurement and save your privacy choices. An unknown location is treated the same way. A small choice bar may appear after brief engagement with the page and does not prevent you from using the website.

In a configured opt-out location, and only where that approach has been reviewed as permitted, advertising measurement may run by default without showing the initial choice bar. You can turn it off at any time using Privacy choices in the footer. An explicit rejection or withdrawal always overrides the regional default. When Meta advertising measurement is enabled, ReMarkSync currently configures the United States as the only opt-out location; all other and unknown locations require an explicit choice before measurement begins.

The allowlisted advertising events are:

• PageView: a permitted view of an allowlisted ReMarkSync page.
• ViewContent: a permitted visit to the main ReMarkSync product page.
• DownloadIntent: selection of a real macOS installer or the published Microsoft Store link. This records intent to download; it does not mean the app was installed or a trial started.

For those events, Meta may receive the event name, a random event identifier, event time, an allowlisted page URL without query parameters, product category, and—only for a download selection—the platform and Mac architecture. Meta may also receive the browser's IP address and user agent from the permitted server request and Meta's _fbp or _fbccookie values when present. The same event name and identifier are used for the browser and server copies so Meta can deduplicate them.

ReMarkSync does not send note or document names, note content, Microsoft identifiers, local file paths, diagnostic information, arbitrary URL parameters, or email addresses to Meta for this advertising measurement. Email-based Advanced Matching is not enabled. The landing website does not report checkout, trial, or purchase events because it cannot verify that those outcomes occurred.

You can reject advertising measurement when asked or change your setting at any time with the persistent Privacy choices control in the footer. Withdrawal sends denied consent updates, stops new permitted Google and Meta events, and ReMarkSync attempts to remove accessible Google measurement cookies and its _fbp and _fbc cookies. Browser settings or the providers may control other storage. If your browser sends Global Privacy Control or Do Not Track, ReMarkSync keeps optional Google and Meta advertising measurement disabled regardless of the regional setting.

The same-origin ReMarkSync Worker forwards permitted, allowlisted events to Meta but does not store those request payloads in ReMarkSync analytics datasets. Your advertising preference remains in your browser until you change it or clear this site's data. Meta determines how long it retains and uses information it receives under its own policies. See Meta's Privacy Policyand Ad Preferences.

Optional desktop analytics

Analytics in the ReMarkSync desktop app is off by default. It starts only if you enable it during setup or later in Settings.

When enabled, the app creates a random installation identifier and sends a small number of product events to PostHog Cloud EU. These events can include:

• Analytics enabled.
• First app open and later app opens.
• Setup started or completed.
• Trial start requested, completed, or unsuccessful.
• First successful sync.
• App version, operating system, event result, and sync direction.

Desktop analytics does not include your email address, account or billing identifiers, Microsoft identifiers, license identifier, note content, document names, or local file paths.

You can turn desktop analytics off at any time in Settings. Turning it off stops future events and removes the analytics identifier stored on your computer. Events already sent remain until the normal retention period ends.

Why ReMarkSync processes information

To provide the service

Account access, trials, subscriptions, activated computers, licensing, support, and the sync features you request are processed because they are needed to provide ReMarkSync and fulfil the agreement with you.

With your consent

Desktop analytics is processed only after you enable it in the app. Google Analytics is processed only after you allow its website category. Google Ads measurement and, in locations that require prior advertising consent, Meta measurement are processed only after you allow the separate Advertising category. You can withdraw any choice without losing access to the core service.

Advertising measurement where an opt-out model is permitted

In a location deliberately configured for an opt-out model after legal review, ReMarkSync relies on its legitimate interest in understanding advertising performance, provides notice and a persistent opt-out, limits the event fields, and honours browser privacy signals. You can object or turn measurement off without losing access to the service.

To operate and protect ReMarkSync

Limited website measurement, service reliability, fraud prevention, trial-abuse prevention, and account security are processed where ReMarkSync has a legitimate interest in operating and protecting the service.

To meet legal obligations

Some billing and transaction information may need to be processed or retained for tax, accounting, consumer protection, disputes, or other legal requirements.

ReMarkSync does not use personal information to make automated decisions that produce legal or similarly significant effects.

Service providers

ReMarkSync uses the following providers to operate the website, app, and subscriptions:

• Website and analytics: Cloudflare protects and delivers the website and stores aggregate performance and a comparison stream of reviewed website interactions. PostHog Cloud EU provides the primary product analytics for the website and optional desktop analytics.
• Optional Google measurement: Google Tag Manager delivers reviewed Google Analytics 4 and Google Ads tags only after the relevant permission. Google receives only the permitted data described above.
• Meta advertising measurement: Meta receives only regionally permitted, allowlisted website advertising events through Meta Pixel and Conversions API, as described above.
• Accounts and email: Hetzner hosts the account and licensing service. Resend sends sign-in codes and service emails.
• Billing: Polar manages checkout, payments, taxes, subscriptions, invoices, and refunds.
• Connected services: Microsoft provides sign-in and OneNote access. The official reMarkable services sync your notes to your computer.

ReMarkSync limits the information sent to each provider to what is needed for its role. Providers may also process routine technical information under their own privacy policies. Microsoft, reMarkable, and Polar also process information under their own terms and privacy policies.

ReMarkSync may disclose limited information when required by law, when needed to protect users or the service, or as part of a business transfer with appropriate confidentiality protections.

International data processing

ReMarkSync is operated from Morocco. Some service providers operate in the European Economic Area, while others operate in additional countries.

Your information may therefore be processed outside the country where you live. Where required, ReMarkSync relies on provider data-protection agreements and legally recognized safeguards for international transfers.

PostHog website and desktop analytics is sent to its European Union service endpoint.

Google may process permitted analytics and advertising measurement information in countries where it and its service providers operate, as described in Google's privacy materials.

Meta may process advertising event information in countries where it and its service providers operate, as described in Meta's privacy materials.

How long information is kept

ReMarkSync keeps information only for as long as it is needed for the purposes described in this policy.

• Account, trial, activation, and license information: kept while needed to provide your account and the service. Some records may be kept afterward for disputes, fraud prevention, security, or legal obligations.
• Sign-in and security records: one-time codes and sessions become unusable when they expire or are revoked. Related security records are kept only as long as reasonably needed to protect accounts and investigate misuse.
• Billing and transaction records: kept for the periods required for taxes, accounting, refunds, chargebacks, consumer protection, and other legal obligations.
• Support communications: normally kept for no more than 24 months after the last exchange, unless they are needed longer for an active dispute or legal obligation.
• Cloudflare website analytics: behavior events in Workers Analytics Engine are kept for three months. The separate Web Analytics dashboard can retain aggregate traffic and performance data for up to six months.
• PostHog analytics: kept for no more than 12 months, after which events are deleted or aggregated.
• Optional Google measurement: the browser keeps your category choices until you change them or clear site data. Google Analytics and Google Ads control retention of the permitted information they receive under their own policies and account settings.
• Meta advertising measurement: the forwarding Worker does not store Meta event payloads in ReMarkSync analytics datasets. The browser keeps your advertising choice until you change it or clear site data. Meta controls retention of information it receives under its own policies and settings.
• Local diagnostic logs: normally kept on your computer for 14 days and rotated automatically. You can also clear them from the Diagnostics section.
• Website theme preference: remains in your browser until you change it or clear the website's stored data.

When information is no longer needed, it is deleted or anonymized. Limited copies may remain temporarily in secured backups until the normal backup cycle removes them.

Your privacy rights and choices

Depending on where you live, you may have the right to:

• Ask what personal information ReMarkSync holds about you.
• Request a copy of that information.
• Correct inaccurate or incomplete information.
• Request deletion of information.
• Restrict or object to certain processing.
• Request portable data where applicable.
• Withdraw consent for desktop analytics, optional Google Analytics, or website advertising measurement.
• Complain to a data-protection authority.

To make a request, email support@remarksync.com, preferably from the email address connected to your account.

ReMarkSync may ask for limited information to confirm that the request concerns your account. Requests will be answered within the period required by applicable law.

Some information may need to be retained after a deletion request for taxes, accounting, fraud prevention, security, disputes, or other legal requirements.

Residents of the European Economic Area and the United Kingdom may contact their local data-protection authority. Where California privacy law applies, California residents may request access, correction, or deletion and will not be treated differently for exercising their privacy rights.

ReMarkSync does not sell personal information. Where applicable law treats advertising measurement as a form of sharing or targeted advertising, you can reject or withdraw it throughPrivacy choices. ReMarkSync also honours Global Privacy Control for this purpose.

Security

ReMarkSync uses encrypted network connections, protected session credentials, access controls, limited analytics fields, and operating-system protections for Microsoft access tokens stored on your computer.

Logs and diagnostic exports hide sensitive values, document names, and local paths by default. If you choose to include names and paths in a diagnostic export, review the file before sending it to support.

These safeguards reduce risk, but no system connected to the internet can be guaranteed to be completely secure.

Children's privacy

ReMarkSync is not intended for children under 16, and we do not knowingly collect their personal information.

If you believe a child has provided personal information to ReMarkSync, email support@remarksync.com so the situation can be investigated and the information deleted where appropriate.

Changes to this policy

This policy may be updated when ReMarkSync, its service providers, or applicable legal requirements change.

The latest revision date will appear at the top of this page. Additional notice will be provided when a change materially affects how account information is collected or used.