Privacy Policy

Last updated: July 12, 2026

The short version: MindCan™ runs entirely in your browser. We operate no servers for the app, require no account, and use no cookies, analytics, or tracking of any kind. We cannot see your canvases, your API keys, or anything else you create — by design.

1. What we collect

Nothing. MindCan is a static, local-first application. There is no sign-up, no telemetry, no analytics script, and no server owned by BNDR LLC that receives your data when you use the app.

2. What stays on your device

With your consent (via the storage notice shown on first visit), MindCan stores the following in your browser's local storage, on your device only:

Your canvas contents (cards, positions, connections) and color legend
Preferences: theme, font size, and canvas mode
Your DeepSeek API key, if you add one in Settings
Your license key and Pro status, if you activate a license

If you decline storage, MindCan still works — your work simply lives in memory for the current session and is not persisted. You can clear all stored data at any time via your browser's site-data settings, or with the app's Reset action.

3. Third-party services (only when you use them)

MindCan contacts external services only in these specific, user-initiated cases:

AI Synthesis (optional): when you run Synthesis, your board's compiled text is sent directly from your browser to DeepSeek (api.deepseek.com) using your own API key. BNDR LLC never receives, proxies, or logs this traffic. DeepSeek's own privacy policy applies to that request.
License activation (optional): when you activate a Gumroad license key, your browser contacts Gumroad's license verification API directly to validate the key. Gumroad's privacy policy applies.
Purchases (optional): payments are processed entirely by Stripe or Gumroad on their own pages. We never see your payment details.
Fonts: the Figtree typeface is loaded from Google Fonts, which involves a standard request to Google's font servers.
Error reports (optional): if the app hits an unexpected error, you can click “Report this issue.” Only then is a redacted technical report (error message and browser/version details — never your canvas content, API key, or license key) sent to a BNDR Labs endpoint so we can fix the problem. Dismissing the prompt sends nothing.

4. Cookies

MindCan sets no cookies. The storage notice you see on first visit governs browser local storage (used solely for the features listed above), not cookies, and no data from it is transmitted anywhere.

5. Your rights & control

Export your data anytime (JSON, TXT, PDF) — it's yours.
Delete everything instantly by clearing site data in your browser.
Revoke AI access by clearing your API key in ⚙ Settings.

Because we hold no data about you, there is nothing for us to disclose, sell, or breach.

6. Children

MindCan is a general-audience productivity tool and does not knowingly collect information from anyone, including children — it collects no information at all.

7. Changes to this policy

If this policy changes, the date above will be updated. Material changes will be noted on this page.

8. Contact

Questions? Contact BNDR LLC at the support email listed on the homepage footer.