Privacy Policy

Who handles your information

Slidesong is an independently operated service at slidesong.io. The operator of this service handles the information described here. For privacy questions, email support@slidesong.io. This policy version is dated 30 October 2026 and applies to the features available when you use the service. Paid checkout remains closed.

The English-language service is intended for adults aged 18 or older. Free local editing is offered internationally where its use is lawful. Account, payment and optional provider features may be unavailable in some locations; do not bypass those restrictions. We do not knowingly offer accounts to children. An adult must have appropriate permission to use photos of other people, including children.

Local photos, music and drafts

The free slideshow editor works in your browser. Photos, music, captions and editing settings can be saved as a local draft in this browser’s IndexedDB storage. Choosing files or editing a draft does not upload those files by default.

Quiet Light, Warm Days and Small Celebrations are bundled, program-generated instrumentals. A selected track is downloaded from this site when needed for your slideshow. Selecting or downloading one does not upload your photos or contact an external music library. Your own music is read locally unless you explicitly save it in a private server project. See the bundled music usage notes for the permission to include these three tracks in videos exported here and publish or share those videos.

A local draft is tied to this browser profile and device, rather than a private server account. Someone using the same browser profile may be able to access it. Clear the draft or the site’s browser storage to remove that local copy. Browser storage can also be cleared by your browser; keep your originals and downloaded videos separately.

Optional OpenAI content checks

A content check starts only after you explicitly agree to it and choose Check photos. Copies of the photos being checked and their caption text are sent through our server to OpenAI for text and image moderation. That check does not send your music or finished video.

This consent is separate from saving a server project. OpenAI handles submitted data under its own API data practices; see its API data controls documentation. We do not promise zero retention by a third-party service.

Accounts and session cookies

Email and password sign-in uses Better Auth. Account and session records support authentication, and session cookies keep you signed in. Blocking or clearing these cookies can prevent access to account features or sign you out.

Private server projects, exports, orders and credit records are linked to your user account. Server access checks separate one user’s private projects from another’s. Local browser drafts are separate from this account access control.

Saving a private server project

The paid-project flow requires a signed-in user to explicitly choose to save a project to the private server. This uploads the project’s photos, any music you include, captions and settings for storage and the export you request. A local draft is not automatically a server backup.

This includes the bundled accompaniment if its audio has been prepared and included in the saved project. The choice to save online is separate from choosing a soundtrack or making a local preview. A server export uses the saved project’s material.

Each currently usable project credit allows one private cloud draft with no successful export. Saving does not spend a credit; the first 1080p export reserves one, spent only on success and returned on failure. After success, the unlocked project no longer occupies an unexported draft slot, and further drafts are limited by your remaining credit balance. At the limit, continue or delete an existing draft before saving another.

Cloud project files and exports have a 30-day retention period from the project’s first cloud creation. The project shows its expiry deadline. Editing, saving again or creating another export does not restart that period. You can delete the server project earlier using its signed-in controls.

Deleting server files does not clear your browser draft or copies you have already downloaded. Keep the files you need before the displayed deadline.

Service providers and processing locations

Cloudflare provides the site’s cloud hosting, private project storage, database and application email services. Optional content checks use OpenAI; optional analytics uses Google. Support messages pass through Cloudflare and the operator’s email services. These providers may process information outside your country. We do not promise that all processing stays in one country, and we do not sell your photos or captions for advertising.

Accounts, transactions and other records

Account and authentication records are kept while your account is open. After a verified closure request has been completed, our target is to remove or anonymize ordinary profile and sign-in data within 30 days. We review accounts with no activity for 24 months before deciding whether to close them; inactivity alone does not automatically delete an account or cancel unused credits.

If sales open, order, credit-ledger, payment, refund and related transaction-audit records have a standard retention period of 24 months after the later of credit expiry or final payment, refund or dispute resolution. We retain only the account linkage needed for those records after account closure. Ordinary activity and security records are retained for up to 180 days; transaction-audit records follow the longer transaction period.

Support correspondence has a standard retention period of 12 months after the request is closed. We review records manually and remove or anonymize them when their period ends. A specific legal obligation, unresolved dispute or security incident may require limited records to be kept longer; it does not extend the retention of your photo and video files by default. Provider-managed recovery copies expire under the provider’s recovery schedule, rather than being erased instantly with an active record.

Waffo Pancake is the selected payment channel. Billing remains disabled and checkout is closed during setup. This site is not currently accepting paid orders.

Optional Google Analytics, PVUV.ai measurement and browser storage

Google Analytics runs only on the configured HTTPS production site, slidesong.io. Local development and preview hosts do not send production analytics. We use Consent Mode v2 in Advanced mode: the Google tag loads after the default consent state is set, without waiting for you to choose. Analytics cookies are off until you allow them. Advertising storage, advertising user data, personalization and Google signals stay off with either choice.

PVUV.ai loads only after you allow analytics and only on the verified HTTPS production site. It uses first-party cookies such as _pv_id, _pv_sid and _pv_ft, plus browser storage that may not expire automatically. The visitor identifier can last about 13 months and the session cookie about 24 hours. PVUV.ai receives public page paths, referrers, safe campaign parameters, language and screen details, limited device and browser characteristics used for traffic-quality checks, time on page, scroll depth, ordinary click interactions and page errors. Sensors, file-download reporting, exit-intent reporting and ad protection are disabled. Account, project, settings, admin and password-recovery pages are excluded. See PVUV.ai’s privacy policy for its processing practices.

When analytics is off, Google can receive restricted cookieless measurement pings. Cookieless does not mean no network requests or no data processing: Google receives request information such as your IP address and browser details. This mode does not provide full cookie-based visitor or session measurement and is not a claim of legal compliance.

Allowed analytics uses Google cookies such as _ga and the PVUV.ai storage described above to measure visits, sessions, public pages and traffic sources. Public page paths, fixed page titles, safe campaign parameters and referrers may be sent. Filenames, photos, music, captions, email addresses, project and order identifiers, private result links and URL fragments are excluded. Account, project, administrator and password-recovery pages are excluded from both integrations. We do not set a Google Analytics user ID. Fixed Google Analytics events cover adding photos, local export starts and outcomes, and opening the paid-project entry. Account session cookies and local drafts in IndexedDB serve separate functions described above. See Google’s Privacy Policy for its processing practices.

The self-hosted CookieConsent manager stores your explicit choice in the first-party slidesong_consent cookie for up to 180 days. Browsing does not extend it. Use the buttons below or the footer’s Privacy settings link to change your choice. Refusal and withdrawal apply immediately; GPC and Do Not Track override an allowance. Withdrawal stops measurement, removes accessible Google Analytics and PVUV.ai cookies and PVUV.ai browser storage, and unloads the PVUV.ai script. The page then refreshes so queued or page-exit reporting cannot resume from the withdrawn session. Clearing the choice cookie restores the default off state and asks you again on a later public-page visit.

Support and privacy requests

Use the support address above for access, correction, export, restriction, objection or deletion requests, or to close your account. We verify account ownership before disclosing or deleting private data. Our target is to respond within 30 days; applicable shorter legal deadlines take priority. If a request needs more time or some records must be retained, we explain the reason.

See Contact for the support email and what to include. Cloudflare forwards messages to the operator’s personal mailbox for manual handling. Your message, email address and any attachments are processed by these mail services; replies may come from the personal mailbox. Do not email passwords or reset links.

Account-recovery emails use the configured application email service. Their links are temporary and intended only for the account owner. You may also raise a concern with the data-protection authority available under applicable law. This policy does not remove those rights.