The Markup Widget & Your Data
Effective date: August 10, 2026
Last updated: August 10, 2026
You saw a small comment toolbar on a website and followed a link here — or you're just curious what that toolbar knows about you. This page is the plain-language answer. It says the same thing the widget's own Privacy & data panel says, in page form you can link to and read later.
The two parties involved
The website you were on chose to install Markup to collect feedback in place. That site's owner decides why feedback is collected and what happens to it — in data-protection terms, they are the controller, and their privacy policy governs your relationship with them. For requests about specific feedback you left, they are the right first stop.
Markup (operated by Pixelmatters, Unipessoal, Lda., Porto, Portugal) is the tool. We store and process the feedback on the site owner's behalf, under a Data Processing Agreement, and we don't use it for anything of our own. Our full Privacy Policy applies to us.
What posting a comment sends
Only what the widget needs to show your feedback to the site's team, in context:
- What you wrote, under the name you typed — and your email, only if you chose to give one.
- Where you were: the page's URL and route.
- What you saw: your window size and your browser's user-agent string, so the team can reproduce the issue.
- A screenshot, only if you attach one. Before the image even exists, fields that look like passwords, card numbers, or one-time codes are blacked out, and the composer shows you what it covered. Nothing uploads unless you post with the screenshot attached.
The widget does not read your clipboard, your other tabs, or anything on the page you didn't point it at.
What stays in your browser
To recognise you as the same commenter next time you visit that same site, the widget keeps a random commenter id and a signed token in that site's browser storage (or in cookies that are cryptographically scoped to that site), plus your appearance preferences. Details, names and lifetimes are in the cookie policy.
The important property: everything is scoped to the one site. The same browser on a different site is a different commenter to us. There is no cross-site identifier, so there is nothing to track you with.
Where your comment travels
The widget talks to exactly one place: the Markup backend that serves the site's project. It loads no third-party scripts, no ad tech, and no trackers onto the page. If the widget itself crashes, it reports the error, the page URL and the user-agent to that same backend — never your identity or what you were writing.
The site owner may have product telemetry enabled, which counts widget usage (a comment posted, a screenshot taken). Those counts are keyed to the site's project — they contain no name, no id, no text, and no IP address. They cannot be connected to you.
Signing in (optional)
Some sites let you verify who you are through a sign-in popup. If you do, your comments carry your verified name, and your email is visible to that site's project team. Signed-in sessions use short-lived tokens: access tokens expire after 15 minutes and are refreshed for at most 7 days before you sign in again. You can sign out from the widget's identity menu at any time.
Erasing what you left
Open the widget menu → Privacy & data → Forget me on this site. This removes every comment and reaction your browser posted on that site and clears the name and email held for you. Replies other people wrote stay (your entries become "Deleted user" so their thread still reads), and the erasure is confirmed in the project's audit log without re-recording who you were.
If you signed in, use Sign out in the identity menu; erasure of a verified account's content happens through account deletion or through the site owner.
How long feedback is kept
Feedback lives as long as the site's project does — that is the site owner's call, and their privacy policy is where a retention promise to you would live. What we sweep automatically on our side (expired tokens, unattached screenshot uploads) is listed in our Privacy Policy.
Questions
About feedback you left on a specific site: ask that site's owner. About Markup itself: hello@pixelmatters.com — Pixelmatters, Unipessoal, Lda., Avenida dos Aliados, nº 168, 4º Andar, 4000-064 Porto, Portugal.