bare.

Privacy, in full.

The complete account of what bare does with data — short, because there isn't much.

Your files

Your Markdown stays on your Mac, as plain .md files in folders you chose. bare reads and writes only inside the folder you opened — operations that would escape it are rejected by design. There is no copy of your content anywhere else: no cloud store, no search index, no database, no cache on our side. We could not read your files if we wanted to; there is no "our side" for them to be on.

No account, no telemetry

There is nothing to sign into. The app sends no analytics, no usage events, and no crash reports. bare does not know who you are, what you write, or how you use it.

Every network call the app makes

This is the complete list.

  1. Your own Git syncs. Push and pull run your own git against your own remotes. Your content travels exactly where you already send it — bare adds no server in between and never sees the traffic.
  2. The update check. On launch, bare fetches a small, cryptographically signed version manifest from download.bare.md to see whether a newer release exists. It carries no account, no identifier, and nothing about your files. Updates are never installed silently — bare tells you, and you choose.
  3. Licence activation (v1). When you enter a licence key, bare sends that key — and nothing else about you or your files — to Lemon Squeezy, the payment provider, to activate it, and revalidates it weekly (with a 30-day offline grace period, so being away from the network never locks you out abruptly). The key is stored in the macOS Keychain.
  4. Remote content in files — only if you ask. Rendered Markdown is sanitised, and remote images, scripts and styles are blocked by default; a per-file "load remote content" action is the only thing that relaxes it, for that file only. Links open in your browser, not in the app.

That's all of it. There is no fifth call.

What this website stores

  • No cookies, no analytics scripts. The page you're reading loads nothing from third parties.
  • If you download: an anonymous counter records the browser's user-agent string, the referring page and the country — no IP address is stored and no identifier links the download to you.
  • If you buy (v1): checkout happens on Lemon Squeezy, the merchant of record; we never see your card details. Their privacy policy governs the purchase itself.

Questions

Email help@bare.md — you'll get the maker, not a support queue.

Accurate as of v1.0.0, 22 July 2026. Material changes will be dated here and in the changelog.