Privacy Policy

Constly is a markdown editor that runs on your computer and keeps your files as plain text on your disk. It works offline. On its own it reaches our servers for just two things — checking your licence and checking for updates (and, if we ever build it and you turn it on, an optional AI feature). Anything else that touches the network — loading a remote image a document points to, or opening a link — happens only when you ask for it, and we spell those out below. The app collects nothing beyond what licensing and updates strictly require, and never your documents. There is no telemetry, no analytics, and no crash reporting inside the app. Ever. (The website is a different story — it uses analytics and a mailing list, both covered below.)

This policy covers both the Constly desktop app and this website, constly.com. Where a request does leave your machine, we say what it carries and to whom. One honest caveat up front: any time the app or your browser contacts one of our servers, that server sees what every web server sees — your IP address, the time, and standard request information such as the app or browser version. We use that only to answer the request and to keep the service standing up (for example, basic rate-limiting against abuse); we don't build a profile from it.

The short version

• Your documents stay on your device. The app never uploads them.
• The app talks to our servers only for your licence and for update checks. Update checks can be turned off.
• Licence checks send your licence key, a random per-install ID, and your computer's name — not a hardware fingerprint, not your documents.
• The website uses Google Analytics and a Klaviyo mailing list. Buying uses Stripe.
• You can see, deactivate, and delete your data — see your rights.

Who we are

Constly is made by RUN THE WALL PTY LTD ("RTW", "we", "us"), an Australian company. We are the people who write the app and run this site, and the data controller for the personal data described here. Our details:

RUN THE WALL PTY LTD
ABN 94 672 933 694
Unit 22, 108 Old Pittwater Road, Brookvale NSW 2100, Australia
hello@constly.com

If you want to reach a human about anything in this policy, email hello@constly.com — that's the fastest route.

The terms you use the Constly app under are set out in our End-User Licence Agreement, a separate document.

What the app sends, and when

The desktop app is built so it can only ever reach two of our addresses: api.constly.com (licensing) and downloads.constly.com (updates). Everything else on the network is blocked at the app level. Here is each thing it sends, and what triggers it.

Licence activation and device check

Activating a licence is done entirely on your device — pasting your key verifies its signature offline and sends nothing. Separately, the app registers the device against your licence so you (and we) can see where it's active. That request goes to api.constly.com/activate and carries exactly four things: your licence key, a random ID generated once per install (a plain UUID — not a hardware fingerprint, and it can't be traced to your machine's serials), your computer's name (the friendly name you'd see in your OS, e.g. "Sam's MacBook Pro" — not your username, and not your documents), and a flag saying whether this is a new activation or just a check-in. It does not send your operating system, app version, or any personal details in that request.

• When: once when the app starts (a quiet check-in that only refreshes "last seen"), when you activate a licence, and when you open the Licence panel.
• To whom: our licensing server (Cloudflare).
• Why: to enforce nothing — the app is never gated — but to let you manage which devices a licence is active on, and to honour refunds.
• How long: the device entry (its ID, name, and last-seen time) is kept while the device is active; deactivating it removes the entry (see your rights).

Deactivating a device

When you deactivate a device — from the app or from your account — the app tells api.constly.com/deactivate your licence key and that device's random ID so the server can free the slot, and it deletes the local licence file from that machine either way.

Revoked-licence check

Once per launch the app fetches a small, signed list of revoked licences (refunds and chargebacks) from api.constly.com/revoked. This is a plain download — it sends no identifiers about you, not even your licence key.

Update checks

The app checks for a new version by fetching a static file from downloads.constly.com. The request doesn't encode your version, operating system, or processor — it's the same file for everyone, and the app compares versions after downloading it. Downloads are verified against a signing key built into the app.

• When: quietly at startup, and whenever you check manually. Automatic checks are on by default and can be turned off in Settings ("Check for updates automatically").
• To whom: our download host (Cloudflare R2).
• Why: so you can get fixes and new features.

Remote images in your documents

If a document you open references an image on the web, Constly does not fetch it automatically — it shows a "Load remote image" button, and only fetches when you click it. That click goes directly to whatever host the document names, so it's worth knowing that loading a remote image tells that host your IP address. Images stored next to your document are read locally and never touch the network.

Opening links and helpers

Clicking a link inside a document, or a "Get Pandoc" / download link, hands the address to your normal web browser. That's a normal browser visit to that site, initiated by you.

What the app never sends

Your documents. Your file contents. Any telemetry, usage analytics, or crash reports — there are none in the app. Constly has no AI features today. If we ever add them, they will be strictly opt-in, will use an API key you provide, and will send text only to the provider you choose — and we'll update this policy before shipping it.

Save Diagnostics

If you hit a bug, Constly has a "Save Diagnostics" action that writes a diagnostics file to a location you pick. It is never sent anywhere automatically — nothing about it phones home. You choose whether to attach it to a support email. So you know what's in it before you send it, it contains:

• your app version, operating system, and processor architecture;
• your settings file, verbatim;
• the last 200 lines of the app's local log; and
• the app's in-memory error list.

The log and settings can include file paths — the names and locations of documents you've recently opened, the files open at the time, and your workspace folder — so if any of those paths are sensitive, review the file before you share it. Your licence key is not included. The app's own log only ever records the kind of error and an HTTP status code — never the contents of a request or response.

What the app keeps on your device

These live only on your computer, in Constly's application-data folder, and are never uploaded (the one exception being that your settings file is copied into a diagnostics file if you choose to save and share one):

• Settings, including your list of recently opened files (their paths).
• Session — your open tabs and any unsaved draft text, so you don't lose work between launches.
• Custom CSS, if you've written any.
• Licence files — your signed licence and the random per-install ID described above.
• A local log for troubleshooting.
• Version history (snapshots) — off by default. If you turn it on, Constly keeps compressed copies of your documents' past versions in its app-data folder so you can go back in time. These stay on your device, are never uploaded, and you can exclude files and set how long they're kept. Note that this history can outlive the original file until it's pruned.

What the website collects

This website is static and hosted on Cloudflare. Two things collect data:

Analytics

We use Google Analytics 4 to understand page visits and which download and buy buttons get used. It runs on page load and sets its own cookies (the _ga cookies) to count returning visitors. Being straight with you: the site does not yet show a cookie-consent banner, so analytics starts when the page loads. If that matters to you, you can block it with any tracker blocker or your browser's settings, and it won't affect the site. Analytics never sees your licence key or any purchase credential — those are scrubbed from the page before analytics loads, and a purchase is reported to Google only as an anonymised reference, never the real order ID.

The "release notes" mailing list

The signup box asks for your email (and, optionally, which OS you'd use). We send it to Klaviyo, our mailing-list provider, to add you to the Constly release-notes list. It's double opt-in — you'll get a confirmation email and aren't on the list until you click it — and every email has an unsubscribe link.

Server logs

As with any website, our host (Cloudflare) processes the requests that reach it, including your IP address, to serve the site and guard against abuse.

Payments

When you buy a licence, the checkout is handled by Stripe (Stripe Managed Payments), which acts as the seller/merchant of record. You enter your card details on Stripe's own hosted page — we never see or store your card number, and card data does not pass through our servers. Stripe handles the payment, tax, and any card-industry compliance.

After a successful payment, Stripe passes us back your email address, your name, and the payment's reference IDs (the checkout-session and payment-intent identifiers). We store those, together with the licence key we issue for your order, in a Cloudflare database. We use them to deliver and support your licence, to match a refund or chargeback to the right licence, and to let you sign in to your account. We email your licence key to you through Resend, our transactional-email provider.

Email and marketing

• Release-notes list (website): opt-in, double confirmation, unsubscribe any time.
• Buyers: when you purchase, we add your email and name to our Constly mailing list so we can send you release and update news. You can unsubscribe from any email, and we treat unsubscribing as final. If you'd rather not be added at all, tell us at hello@constly.com and we'll remove you.
• Transactional email (your licence key, sign-in links) is sent through Resend and is not marketing — you can't unsubscribe from your own licence key, but we only send it when you buy or ask for it.

Your account and licence portal

At constly.com/account you can manage your licence. There's no password: you enter your purchase email and we email you a one-time sign-in link that expires in 15 minutes. Once signed in you can see your licence key, see the devices it's active on, deactivate a device, and have your key re-sent. Refunded licences stay visible there as history, marked as such.

The companies we rely on

We keep the list short. Each of these processes some of your data on our behalf, and each has its own privacy policy governing what it does with it.

If you install Constly from an app store (for example the Microsoft Store), that store also handles your data under its own privacy terms as part of the install and any store account you use.

Your rights, and how to use them

Because your documents never leave your device, the data we actually hold about you is small: for buyers, your email, name, licence key, order references, and the devices your licence is active on; for subscribers, your email. You can:

• See it — sign in at constly.com/account to view your licence, key, and devices.
• Deactivate a device — from the app or the account portal; this removes that device's entry.
• Unsubscribe — from the link in any marketing email.
• Correct or delete your data — email hello@constly.com and we'll update or delete your account records. We may keep the minimum needed to meet legal, tax, and anti-fraud obligations — for example, a record that a refunded licence was revoked.

RTW is an Australian company. If you are in the European Union or the United Kingdom, the GDPR gives you rights over your personal data — including access, correction, deletion, restriction, portability, and objecting to a use — and the right to complain to your local data-protection authority. Where we rely on your consent (for example, marketing email), you can withdraw it at any time. To exercise any of these, email hello@constly.com.

Children

Constly is a tool for general audiences and isn't directed at children under 16. We don't knowingly collect personal data from children. If you believe a child has given us personal data, email us and we'll delete it.

Where your data is handled

We're based in Australia. The providers above operate in various countries, including the United States and across Cloudflare's global network, so the limited data we hold may be processed outside your country. We only share data with the providers listed here, only for the purposes described, and each is bound by its own privacy commitments.

Changes to this policy

If we change what we collect or who we share it with, we'll update this page and its effective date, and — for anything material — say so clearly. The version and date at the top tell you which revision you're reading.

Contact

Questions, requests, or corrections: hello@constly.com.

RUN THE WALL PTY LTD · ABN 94 672 933 694 · Unit 22, 108 Old Pittwater Road, Brookvale NSW 2100, Australia
Effective 27 August 2026 · Version 1.0