Privacy Policy

The controller of your personal data is the individual operating DeckWave from Poland. You can reach the controller in all data matters via @mrdeathpl on X. No data protection officer has been appointed — contact the controller directly.

• Account data (e-mail, user ID, sign-in provider, and — if you sign in with Google — your name and avatar). Purpose: creating and running your account. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
• Licence data (Pro status, activation date, number of free Pro exports used). Purpose: delivering the purchased licence and the free trial. Legal basis: Art. 6(1)(b) GDPR.
• Payment data — handled by Stripe. We receive only a confirmation and a reference to your account, never card numbers. Legal basis: Art. 6(1)(b) and 6(1)(c) GDPR (accounting duties).
• Technical data (IP address, browser type, request logs generated by our hosting and backend providers). Purpose: security and stable operation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Support correspondence sent to us on X. Legal basis: Art. 6(1)(f) GDPR.

The slides you write, your branding settings and any avatar you upload are stored only in your own browser's local storage so your work survives a page refresh. They are not uploaded to our servers. Clearing your browser data deletes them permanently.

DeckWave uses no advertising or analytics cookies. Only strictly necessary storage (sign-in session and your local draft) is used, which under Art. 173 of the Polish Telecommunications Law does not require consent.

We use carefully selected providers acting as processors: Supabase (authentication and database), our hosting/CDN provider, and Stripe (payments, acting as an independent controller for payment data). Where data is transferred outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses.

Account and licence data are kept for as long as your account exists, and afterwards only where required for accounting (5 years from the end of the tax year of a purchase) or for defending claims. Technical logs are kept for a short period by our providers. Local drafts stay in your browser until you clear them.

You have the right to access your data, rectify it, erase it, restrict or object to processing, and to data portability. Where processing is based on consent, you may withdraw it at any time without affecting past processing. To exercise any right, message @mrdeathpl on X.

You may also lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

Providing data is voluntary but necessary to create an account or buy Pro. We do not carry out profiling or automated decision-making with legal effects.