Privacy notice
Effective 1 October 2026
Mark (mark.sylphx.com) is provided by Sylphx Limited, a company registered in England and Wales (company number 16438428), registered office 128 City Road, London EC1V 2NX ("we", "us"). We are the controller of the personal data described here. Contact: hi@sylphx.com, +44 333 335 7935.
The short version
Mark has no accounts, no sign-up, no cookies and no analytics. The studio stores nothing in your browser. To deliver an image we process the technical data that comes with every web request, and we read public data from the services you name in the URL.
What we process
- Request data. When a browser, or an image proxy such as GitHub's, requests a Mark URL, our servers and our content delivery network receive the IP address, user agent, referring page, time and the full requested URL.
- What you put in a URL. Text, GitHub usernames, repository and package names you place in an image URL are processed to render that image. Do not put personal data in a URL unless you want it rendered and cached publicly.
- Public third-party data. Live cards and badges read public data from GitHub, npm, pub.dev, Packagist, Bundlephobia and the Chrome Web Store, such as public profile statistics, star counts and package versions, and cache the rendered image.
Why, and our lawful basis
We process this data to deliver and cache images, keep the service fast and available, and prevent abuse and attacks. Our lawful basis is our legitimate interests in operating a free public image service securely (UK GDPR Article 6(1)(f)).
Who we share it with
Our content delivery network (Cloudflare) and our hosting infrastructure process request data on our behalf. Cloudflare operates globally, so request data may be processed outside the UK under the safeguards UK law requires. We do not sell personal data and we do not use it for advertising.
How long we keep it
Request logs are kept only as long as needed for security, abuse prevention and operations, then deleted. Rendered live images are cached for up to about four hours and may be served from cache for up to seven days if the upstream service is unavailable. Static images are cached by browsers and CDNs for up to a year, because they never change.
Your rights
Under UK data protection law you may ask for access to, correction or erasure of your personal data, object to or restrict our processing, and ask for portability where it applies. Email hi@sylphx.com. Because we hold no accounts, include the image URL or other detail that lets us find the data. You can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We may update this notice. The effective date above shows the current version.