Privacy and cookie policy
Last updated 8 October 2026. This policy covers SlideClark (formerly known as Pitchcraft), the web app and website at slideclark.com (the "Service"), and the old address visser23.github.io/pitchcraft, which now only redirects to it. It is written to meet the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the EU GDPR.
The short version
- Your decks never leave your device. SlideClark has no accounts, no server-side storage and no database. Decks, images and settings are kept in your browser only.
- Analytics are off until you say yes. If you accept, Google Analytics sets two cookies and sends anonymous usage data to Google. If you decline, nothing is loaded or sent.
- You can change your mind at any time in Settings → Privacy.
1. Who is responsible
The Service is operated by Matt Visser as an individual (the "operator", "we"), who is the data controller for the analytics described below. To ask a question or exercise a right, open an issue at github.com/visser23/visser23.github.io/issues (please do not include personal information in a public issue; say you would like a private reply and we will arrange one).
2. What is stored on your device
The Service uses your browser's local storage to work. These items are strictly necessary or were requested by you (saving your deck, remembering a setting you chose), so under PECR they do not need consent. They never leave your device.
| Name | What it holds | Lasts |
|---|---|---|
slideclark.deck.v3 | Your current deck, including any pictures you added (autosave) | Until you clear it |
slideclark.backups.v1 | A few recovery copies of earlier versions of your deck | Until you clear it |
slideclark.ui | Your light or dark mode choice | Until you clear it |
slideclark.consent | Your answer to the cookie banner and when you gave it | Until you clear it or change your answer |
slideclark.localfonts | A flag saying you allowed the font list from your computer (the list itself is never stored) | Until you clear it |
Before the rename to SlideClark the same items were stored under names that start with pitchcraft. at the old address. They stay there, on your device, until you clear them. Nothing is copied to slideclark.com unless you save your deck as a file and open it here.
Share links and share files contain the deck itself. A link keeps the deck after the # sign, which browsers do not send to any server, so nothing is uploaded; but anyone you give the link or file to can read the deck.
3. Analytics cookies (only with your consent)
If you choose Accept analytics, we load Google Analytics 4 (measurement ID G-EF7CY6HHYP) from Google's servers. It sets:
| Cookie | Purpose | Lasts |
|---|---|---|
_ga | Distinguishes one browser from another so visits can be counted | 2 years |
_ga_G-EF7CY6HHYP | Keeps track of the current session | 2 years |
What Google receives: pages viewed, approximate location (derived from your IP address, which Google does not store in full for Analytics 4), browser, device and operating system type, language, the page you came from, and how long you stayed. We have turned off Google signals and advertising personalisation, and we do not link analytics to your identity. We never send the contents of your decks, your pictures or the text you type.
Why we do this: to understand which features people use so we can improve them. Legal basis: your consent (Article 6(1)(a) UK/EU GDPR; regulation 6 PECR). Declining has no effect on the Service.
Changing your mind: open Settings → Privacy and switch analytics off. We then stop loading Google's script and delete the cookies listed above. You can also clear cookies in your browser at any time.
4. Other parties who see your data
- Vercel Inc. hosts the Service at slideclark.com. Like any web host it processes your IP address and browser details in its server logs to deliver the site and protect it from abuse. We do not use Vercel's analytics products. See Vercel's privacy policy.
- Cloudflare, Inc. provides the domain name (DNS) service for slideclark.com, so it answers the lookup that turns the address into the host's address. It does not sit in front of the Service, so it does not handle the pages or your decks. See Cloudflare's privacy policy.
- GitHub, Inc. still hosts the old address (visser23.github.io/pitchcraft), which holds only a small redirect page to slideclark.com. GitHub processes your IP address and browser details in its server logs when that page loads. If that page finds a deck saved in your browser from before the rename, it offers to download it as a file before sending you on; that happens on your device and sends nothing. See GitHub's privacy statement.
- Google LLC receives analytics data only if you accept (section 3). Google may process data in the United States and other countries; transfers rely on the UK-US data bridge / EU-US Data Privacy Framework or standard contractual clauses. See Google's privacy policy.
- Pictures and links in your deck. If you point a slide at a picture on another website, your browser requests it from that site, which then sees your IP address. Pictures you upload are embedded in your deck and not sent anywhere.
- Fonts are bundled with the Service. We do not use Google Fonts or any other font host. If you let SlideClark list the fonts installed on your computer, that list stays in the page and is not uploaded.
We do not sell personal data, use it for advertising, or run any other trackers. The Service does not send error reports or usage logs from your browser to anyone, and it calls no third-party services other than those listed here.
5. AI features
SlideClark does not call any AI service itself. The "Build with AI" button gives you a prompt to copy into an AI assistant of your choice, and a deck you paste back is read locally. What you share with that assistant is governed by that provider's terms, not this policy.
6. How long we keep data
Items in your browser stay until you delete them (Deck → New deck, Settings, or your browser's "clear site data"). Google Analytics data is kept for the retention period set on the analytics property, which we keep at 14 months or less. Server logs held by Vercel and GitHub follow their own retention.
7. Your rights
You have the right to access, correct, erase or restrict use of your personal data, to object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Because we cannot identify you from analytics data, we may need the cookie value (the number after GA1.1. in your _ga cookie) to find it. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority.
8. Children
The Service is a general-purpose tool and is not aimed at children under 13 (or under 16 where local law requires). We do not knowingly collect personal data from children.
9. Security
The Service is served over HTTPS. Slides containing custom code run in a sandbox that cannot reach your other data or the network, and pasted decks are cleaned before use. No system is perfectly secure, so keep your own backups of important decks (Save deck file).
10. Changes
If this policy changes in a way that matters, we update the date above and, where the change affects cookies, ask for your consent again.