Privacy Policy

In one table

Every network connection the application can make, and what triggers it. Nothing else leaves your computer.

Send Feedback

The feedback window (Help › Send Feedback…) and the Feedback palette let you write to us. Nothing is sent until you press Send. When you do, the application posts one report to our support server at https://appsupport-gajv.onrender.com, a service we run on Render (Render Services, Inc., USA). The report contains:

• the text you wrote;
• the files or pictures you attached, if any. Nothing is attached unless you attach it yourself;
• a technical context: the application version and build, whether it is the copy from this site or from the Store, the Windows version and processor architecture, the computer’s host name, the display language, the keyboard layout, the screen size and scale and — if a document is open — the active tool, the zoom and the colour mode. Not the document, not its name, not its path.

If you are offline the report is queued in %LOCALAPPDATA%\MasterPage\feedback-outbox\ and sent later, when there is a connection. You can delete that folder at any time and the queued report is gone.

The host name is included so that several reports from the same machine can be read together. It is the only identifier in a report; there is no account and no e-mail address unless you type one in the text. The same window is where you tell us that the AI assistant gave you an inappropriate answer.

Diagnostics and crash reports

With Send diagnostic logs switched on in Edit › Preferences… (it is on by default), errors the application runs into are sent to the same support server, so that we can fix what breaks. Never document content. While the switch is on, the application also checks at launch and every ten minutes that the server is reachable, with a plain request that carries no data.

If the application crashes, it writes a report and a memory dump on your computer, in %LOCALAPPDATA%\MasterPage\crash\. At the next launch, if the switch above is on, the text of the report — the exception, the call stack with module names and the technical context described above — is sent as one report. The memory dump is not sent. Turn the switch off and nothing is sent; the local files stay where they are and you can delete them.

AI Console and AI scripts

The AI Console is an assistant inside the application that can use the application’s own commands; AI scripts ask the same assistant to write a script for you. They talk to the network only when you send a request. What happens depends on the engine chosen in Edit › Preferences… › AI:

Native — the default, no key needed

• The request goes to our AI proxy at https://appsupport-gajv.onrender.com, which forwards it to the AI provider it is configured with — Anthropic, OpenAI or Google (all in the USA) — and returns the answer. The provider processes the request under its own terms; we send it nothing that identifies you.
• The request contains your prompt and, when the assistant uses its tools, what those tools report about the open document (for example its page count, the names of its styles or the text of a selected frame). The tools run on your computer; the document file itself is not sent.
• Each request carries a random device id: a UUID generated the first time and kept in the application’s settings file. It exists only so that the proxy can apply a daily limit of free requests; it is not linked to a person, an account or a computer name, and it is not used to track what you do.

Your own key (Anthropic or Google)

• The request goes directly from your computer to the provider you chose, with your key, under that provider’s terms. Nothing passes through our server. To show the list of models, the application also asks that provider for it, with your key.
• Your API keys are kept in the Windows Credential Manager for your user account (entries named MasterPage/…), never in a settings file. Remove Key in Preferences › AI deletes them.

Check for Updates

In copies downloaded from this site, Help › Check for Updates… fetches https://www.rainbowfactory.uk/masterpage/updates/appcast-windows.xml (or appcast-windows-classic.xml for the Classic edition) with a plain request and compares the version in it with yours. The request carries no identifier, no document name and no machine name. If you allowed it, the automatic check at launch, at most once a day, makes the same request and nothing more; the answer can be changed in Edit › Preferences… › General.

If you choose to install an update, the application downloads the package from this site, checks its length, verifies its signature against the key built into your copy, and refuses anything that does not verify. In the Microsoft Store copy there is no update check at all: updates come from the Store, under Microsoft’s privacy statement.

Online Help

Help › Master Page Help (F1), Help › Keyboard Shortcuts and Help › Other Apps open pages of this website in your default browser. The application itself sends nothing; the browser requests the page as it would any other.

Scripts and MCP

Scripts run inside the application on your computer. masterpage.exe --mcp-stdio lets an AI assistant you set up yourself — such as Claude Desktop or Claude Code — work with the application through the Model Context Protocol. It exchanges messages over standard input and output and hands them to the running application through files in %LOCALAPPDATA%\MasterPage\MCPBridge\. It opens no network port. It is governed by Allow external control in Edit › Preferences… › MCP Server. What that assistant sends to its own provider is governed by the assistant’s policy, not by this one.

What stays on your computer

• Your documents. Master Page opens and saves files where you tell it to. It never uploads a document to check it, render it or save it. The only files that leave are the ones you attach to a feedback message yourself.
• Preferences (palette positions, options, recent files, the device id above) in %LOCALAPPDATA%\MasterPage\settings.json, and application data (recovered copies of unsaved work, the feedback queue, crash reports, update downloads, the MCP mailbox) in %LOCALAPPDATA%\MasterPage\. Your scripts are in %APPDATA%\MasterPage\Scripts\.
• API keys in the Windows Credential Manager.
• Crash reports as plain text and a memory dump, as described above.

Uninstalling the application does not delete these; you can remove the folders yourself.

This website

This site is static pages. It sets no cookies of its own, runs no analytics and embeds no advertising. Fonts are served from this site. Links to Discord, the Microsoft Store and GitHub lead to those services and their policies. Our hosting provider keeps ordinary server logs (IP address, requested page, time) for the operation of the site, including downloads of the application and requests for the update feed.

Retention, your rights, contact

Data controller: Rainbowfactory Ltd, London, United Kingdom (the company also trades as Rainbow Factory). Registered office: 24 Fitzroy Square, London, England, W1T 6EP. Company number: 14629999. E-mail for privacy requests: support@rainbowfactory.uk. You can also reach us on Discord.

Why we process it. Feedback, diagnostic and crash reports are processed to fix bugs and improve the application (our legitimate interest, and your request when you press Send). AI requests are processed to provide the feature you asked for. Update checks deliver the files you asked for. Nothing is used for advertising or profiling, and nothing is sold.

How long we keep it. Feedback, diagnostic and crash reports are kept on our support server for as long as the issue they describe is open, and at most 12 months. Our AI proxy keeps no requests beyond the daily request counter, which resets every day; what the AI provider retains is described in its own policy. The update feed is a public file and records nothing.

Where. Our support server and AI proxy run on Render (Render Services, Inc.) in the United States. The AI providers are in the United States.

No usage tracking. The Windows application collects no usage statistics of any kind: it does not count launches or the features you use, and contains no analytics library. If that ever changes, it will be said here before it ships.

Your rights. Under the UK GDPR and, where it applies, the EU GDPR you can ask us what we hold about you, ask for it to be corrected or deleted, object to the processing, or complain to the Information Commissioner’s Office. Because reports carry no account and no e-mail address, a request should mention the host name and approximate date of the report so that we can find it.

Children. The application is not directed at children and collects no personal data from anyone as part of normal use.

Changes. When the application gains or loses a network feature, this page changes with it, and the date at the top is updated.