Privacy Policy

DeckLink, operated by Adam Jones (“DeckLink”, “we”, “us”), lets people share self-contained presentation decks via a short link and see who opened them. This policy explains what personal data we process, why, and the choices you have. It covers the DeckLink website and the decks we host on your behalf.

Who this applies to

• Account holders who upload and share decks.
• Viewers who open a shared deck link.

Information we collect

From account holders:

• Your email address, used for magic-link sign-in and view notifications.
• The decks you upload (HTML and assets), their titles, and link settings.

From viewers of a shared deck:

• If the deck owner enables the email gate, the email address you enter to view.
• A hashed (irreversible) form of your IP address. We do not store raw IP addresses.
• Approximate location (city and country) derived from your IP at view time.
• Your browser’s user-agent, plus view timestamps and duration.

Automatically:

• Cookies needed to keep you signed in, remember a viewer’s gate email, and operate the service.
• Aggregate, privacy-friendly usage analytics (Vercel Web Analytics).

How we use it

• Host and serve decks, authenticate you, and show owners who viewed.
• Send transactional email (sign-in links, “your deck was opened” notifications).
• Detect and filter bots so view counts stay accurate.
• Protect the service through rate limiting and abuse prevention.
• Process uploaded deck content with an AI model to pick the entry file and detect built-in viewer chrome (see Service providers).

Legal bases (EEA / UK)

• Performance of a contract: providing the service you signed up for.
• Legitimate interests: security, accurate analytics, and notifying owners of views.
• Consent where required, such as non-essential cookies.

Service providers

We share data only with providers that help us run DeckLink:

• Vercel: hosting, deck asset storage, and analytics.
• Neon: PostgreSQL database.
• Resend: transactional email delivery.
• Upstash: rate limiting.
• OpenRouter: AI processing of uploaded deck content (entry and chrome detection).
• Stripe: payment processing, if and when paid plans are enabled.

We do not sell personal data.

Cookies

• Essential: sign-in session, CSRF protection, a viewer’s gate email, and a device identifier used to claim anonymously uploaded decks.
• Analytics: privacy-friendly, with no cross-site tracking.

Data retention

• Account and deck data: kept until you delete the deck or your account.
• View records: kept to power your analytics; deleting a deck removes its views.
• Hashed IPs and notification logs: retained briefly for throttling and abuse prevention, then pruned.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to processing of your personal data. Contact us to exercise them. Viewers can ask the relevant deck owner, or us, about data tied to their views.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Security

We hash IP addresses, scope cookies, serve decks from an isolated context, and rely on provider-level encryption in transit and at rest. No method of storage or transmission is perfectly secure.

Children

DeckLink is not directed to children under 13 (or the age of digital consent in your country), and we do not knowingly collect their data.

Changes

We may update this policy. We will revise the date above and, for material changes, notify account holders.

Contact

DeckLink is operated by Adam Jones. For privacy questions or to exercise your rights, email adam@ajones.studio or write to Adam Jones, 447 Broadway, New York, NY 10013, USA.