What we record and why.
A request, an uploaded source, a payment and a delivered package are separate records. This page describes the current implementation and its limits.
Public traffic
SlideOS first-party telemetry can record page path, a random session-scoped identifier, referrer hostname, campaign parameters, CTA interactions and timestamps. The event schema does not intentionally store full IP addresses, browser fingerprints, advertising IDs or cross-site identifiers.
Global Privacy Control disables the SlideOS browser tracker. This does not disable all infrastructure processing: Cloudflare handles hosting and security, and may provide separately enabled Web Analytics.
Requests and notifications
The contact form stores the information you provide so the owner can scope and answer the request. When configured, Resend receives an owner-alert message containing request details and your reply address. An alert is not a marketing subscription.
Do not include passwords, private keys, account numbers or sensitive records in the first contact form. Describe the sources and agree a transfer method first.
Syllabus files and delivery
Semester uploads use Cloudflare R2 for source files and prepared packages, with request and order records in D1. Upload only documents you are authorized to share. Automatic preparation remains unavailable until its storage, eligibility, processor and payment gates pass.
The automatic processor temporarily downloads sources to its processing host and removes those temporary copies after the attempt. This does not delete the R2 originals. The automatic online edition excludes the interactive HTML source overlay.
Payments and private links
When checkout is enabled, Stripe hosts the payment form; SlideOS does not collect card details. A signed payment receipt must match the stored order before download is allowed.
No SlideOS account or subscription is required for the founding student offer. The full private order link is an access credential. Do not share it publicly. Order pages do not load SlideOS analytics.
Retention and deletion
Private order access expires seven days after upload. Expiry is not deletion: the current implementation does not automatically delete stored source files, packages or request records. Retention and deletion operations must be agreed before expanded public processing.
Use the contact form for a privacy, deletion or lost-link request. Quote the request or order reference; do not post your complete private link or upload extra sensitive material.
Scope of this notice
No public AI-provider execution service is enabled by these pages. AI-sidecar descriptions are product direction, not permission to send your sources to an external model.
This is an implementation notice, not a claim of legal certification or a jurisdiction-specific privacy policy. Review appropriate processing, retention, refund and support terms before enabling checkout or expanding data use.