Privacy Policy.
Effective date: March 2025 · Applies to slidemo.app
1. Controller
The controller responsible for processing your personal data under the GDPR is:
Eric Dillenberger
Freiligrathstrasse 2, 30171 Hannover, Deutschland
E-Mail: hello@slidemo.app
2. Data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address (attendee) | Join a session; receive your personalised handout and notes by email | Art. 6(1)(b) GDPR — performance of contract |
| Email address (presenter) | Create sessions; receive speaker analytics | Art. 6(1)(b) GDPR — performance of contract |
| Session content (title, slides, speaker name) | Deliver the live session and generate handouts | Art. 6(1)(b) GDPR — performance of contract |
| Engagement data (bookmarks, notes, slide views) | Generate your personalised handout; provide speaker with aggregated analytics | Art. 6(1)(b) GDPR — performance of contract |
| Technical data (IP address, browser, device type) | Security, abuse prevention, and service reliability — logged by our infrastructure providers | Art. 6(1)(f) GDPR — legitimate interests |
| Handout open events | Inform the speaker how many attendees opened their handout | Art. 6(1)(f) GDPR — legitimate interests |
We do not sell your data, use it for advertising, or share it with any third party except the processors listed in section 4.
3. Age requirement
slidemo is intended for users who are 16 years of age or older. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with their data, please contact us at hello@slidemo.app and we will delete it promptly.
4. Service providers and data transfers
We use the following sub-processors. Each has been engaged under a Data Processing Agreement (DPA) or equivalent safeguard:
| Provider | Purpose | Location / Safeguard |
|---|---|---|
| Google Firebase (Cloud Firestore, Storage) | Database and file storage | EU (eur3 multi-region) · Google DPA + SCCs |
| Vercel Inc. | Application hosting and CDN | EU region · Vercel DPA + SCCs |
| Resend Inc. | Transactional email delivery | EU region servers · Resend DPA + SCCs |
Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914) as the transfer mechanism.
5. Data retention
| Data type | Retention period |
|---|---|
| Session records | 24 months from session date |
| Attendee records (email + engagement) | 12 months from session date |
| Raw engagement events | 6 months, then converted to aggregate statistics only |
| Speaker profile photos | Until the presenter deletes them |
You may request early deletion at any time (see Your Rights below).
6. Cookies and local storage
We use a small number of cookies and browser local storage entries:
- Essential: Firebase authentication tokens necessary to keep you signed in as a presenter. These cannot be disabled without breaking the service.
- Functional (consent stored locally): A record of your cookie consent choice, saved in your browser's local storage. This is necessary so we do not ask again on each visit.
- Analytics (optional, requires consent): Session engagement events (slide views, bookmark actions) are recorded to generate your handout and provide the speaker with anonymised engagement statistics.
Under §25 TTDSG, we ask for your consent before setting non-essential cookies. You can withdraw consent at any time by clearing your browser's local storage or contacting us.
7. Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — request a copy of the data we hold about you
- Rectification (Art. 16) — ask us to correct inaccurate data
- Erasure (Art. 17) — ask us to delete your data
- Portability (Art. 20) — receive your data in a machine-readable format
- Objection (Art. 21) — object to processing based on legitimate interests
- Restriction (Art. 18) — ask us to limit processing in certain circumstances
- Withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing
To exercise any of these rights, email hello@slidemo.app. We will respond within one month.
8. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority for our registered address is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
www.lfd.niedersachsen.de
9. Contact and updates
For any privacy-related questions, email hello@slidemo.app.
We may update this policy from time to time. Material changes will be notified by updating the effective date at the top of this page. We encourage you to review it periodically.