Privacy notice

1. Who is responsible

The controller under the GDPR for this website is:

Leo Warnow
Linz, Austria
Email: hello@slideturbo.com

Where this notice says “we” or “us”, it means this controller. We have not appointed a data protection officer, as Art. 37 GDPR doesn’t require one here. For anything about your data, write to the email address above.

2. The Slideturbo add-in

Slideturbo runs inside PowerPoint on your Mac. It has no account, no analytics and no crash reports, and it never sends anything about you, your slides or how you use it. Your shortcuts and settings are kept on your Mac, in ~/Library/Application Support/Microsoft/Slideturbo and in PowerPoint’s own preferences.

It contacts our website in one case only: when you press “Check for updates” in its settings (section 7).

Downloading the installer from this website is a normal request to the web server. It is logged like any page visit (section 4) and counted (section 5).

3. Hosting

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The servers are in Germany, so no personal data is transferred to a country outside the European Economic Area. ALL-INKL.COM processes data on our behalf and only on our instructions. We have concluded a data processing agreement with it under Art. 28 GDPR.

The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in delivering this website securely and reliably.

4. Server log files

When you open a page or download a file, your browser sends some information that the hosting provider records in log files:

• your IP address
• the date and time of the request
• the page or file requested
• the referrer URL (the page you came from)
• your browser type and version, and your operating system
• the host name of the accessing computer

This data is used to deliver the website and to detect and fend off attacks on the server. It isn’t combined with other data, it isn’t used for the counts in sections 5 and 6, and we don’t use it to identify anyone.

The legal basis is Art. 6(1)(f) GDPR: the legitimate interest in a website that works and is secure, which isn’t possible without these logs. The hosting provider deletes log data after seven days at the latest. Data needed as evidence, for example after an attack on the server, is kept until the incident has been dealt with.

5. Counting downloads

To know how many people use Slideturbo, the website counts how often the installer is downloaded. For each day, version and channel it stores one number, for example “22 September 2026, version 1.0.0, LinkedIn: 14 downloads”. The channel is a short tag in the link we post somewhere, such as ?via=li on a link we share on LinkedIn. If the link you followed has none, the download counts as direct. The tag travels in the address only, and nothing is stored on your device for it. Nothing else is stored with the count: no IP address, no browser details, no cookie and no information about the page you came from. The count can’t be traced back to you or to anyone else, so it isn’t personal data.

To keep search engines and link previews out of the count, the server looks at the browser identification your browser sends with the request (section 4) at the moment of the download, and doesn’t keep it. The legal basis for that brief check is Art. 6(1)(f) GDPR: our legitimate interest in knowing how many people download Slideturbo.

6. Counting page views

To know which pages and guides are useful, the website counts how often each page is viewed and how often it is read to the end. When a page is shown, a short script on it sends our own server two things: the page’s address on this website, and the channel tag of the link you followed, if it had one (section 5). When the end of the page has been on screen and the page has been open long enough to read it, the script sends the same once more. For each day, page and channel the server stores two numbers, for example “6 November 2026, the guide to PowerPoint shortcuts, LinkedIn: 120 views, 48 read to the end”.

Nothing else is stored with the count: no IP address, no browser details, no cookie, no ID and no information about the page you came from. We can’t tell whether two views come from one person or from two. The count can’t be traced back to you or to anyone else, so it isn’t personal data. The script stores nothing on your device and reads nothing stored there. If JavaScript is switched off, nothing is counted.

As with downloads, the server looks at the browser identification your browser sends with the request (section 4) to leave out search engines and link previews, and doesn’t keep it. The legal basis for that brief check is Art. 6(1)(f) GDPR: our legitimate interest in knowing which pages of our website people read.

7. Checking for updates

The add-in’s settings have a “Check for updates” button. Nothing happens until you press it, and nothing happens on its own: there is no background check, no schedule and no notification.

When you press it, the add-in asks this website for a small file that names the current version, and compares it with yours. It sends nothing with that request: no version, no serial number, no name, nothing about your slides. Like any request to a web server, it tells the server your IP address and the fact that a Slideturbo installation asked, which the hosting provider records in the log files described in section 4 and deletes after seven days. If you decide to install the update, the download is counted as in section 5.

The legal basis is Art. 6(1)(f) GDPR: your interest and ours in your running a current version, and our interest in a secure server. If you would rather not make that request, don’t press the button. The add-in works the same without it.

8. Newsletter

You can subscribe to our emails about Slideturbo, such as what’s new, tips for using it, our latest guides and, now and then, a question about how it’s working for you. We send them only to people who ask for them, and every email has a link to unsubscribe with one click.

Signing up. When you enter your email address in the form, it goes to our own server, which sends you an email with a link to confirm it (double opt-in). Only when you open that link and confirm are you subscribed. The link works for three days. It carries your address, where you signed up and the time, encrypted, so our server doesn’t need to store them while it waits. Our email service, Plunk (below), keeps the address it sent the email to as a contact that gets no newsletter. If you don’t confirm, we delete it there after seven days.

So that nobody can use the form to flood an inbox, our server keeps a keyed hash of your IP address and of the email address you entered, with the time, for 24 hours. A keyed hash is a code made from them that can’t be turned back into the address. After 24 hours it’s deleted.

What we store. When you confirm, we store your email address, that you’re subscribed, where you signed up (after downloading Slideturbo, or elsewhere on this website), the language of the letter, and the times you signed up and confirmed. This is the record that you gave your consent, which Art. 7(1) GDPR requires us to be able to show. Your IP address isn’t part of it. We use this data only to send you these emails, and where you signed up to choose which of them you get.

Legal basis. Your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time, with effect for the future (Art. 7(3) GDPR). The brief record that keeps the form from being misused is based on Art. 6(1)(f) GDPR: our legitimate interest in a form that can’t be used to send unwanted email.

No tracking. Our emails have no tracking pixel, and their links aren’t rewritten to count clicks: we don’t know whether you open a letter or which links you follow. Open and click tracking is switched off in Plunk for all our emails. The one thing our emails load is the Slideturbo logo at the top, from Plunk’s server in Germany (below). It is the same picture at the same address in every email, so it can’t tell us who opened which one. If your email app loads it, that server receives your IP address, as any server does that a picture is loaded from.

Unsubscribing. Every letter has a link to unsubscribe with one click, and you can also write to us. After that you get no more letters. We keep your address, marked as unsubscribed, with the record of your consent for three years, the period in which claims about it can be made, and then delete it. If you’d like it deleted right away, tell us and we will.

Plunk and Amazon SES. We send the newsletter and the confirmation email with Plunk (useplunk.com), an email service that processes the data on our behalf and only on our instructions. We have a data processing agreement with Plunk under Art. 28 GDPR. Plunk keeps contact data on servers of Hetzner Online GmbH in Germany. To deliver the emails, Plunk uses Amazon Simple Email Service (Amazon SES), run by Amazon Web Services. While an email is on its way, its content and your address may pass through Amazon’s servers outside the European Economic Area, including in the United States. Plunk states that the data is only in transit there and not stored for long, and that this transfer is covered by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

9. No cookies, no tracking, nothing from third parties

This website sets no cookies and uses no local storage, session storage or similar technology: nothing is stored on your device and nothing already stored there is read. That’s why no consent is needed under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), and why there’s no cookie banner.

There is no analytics service, no tracking pixel, no fingerprinting, no advertising and no social media plug-in. The page view count in section 6 is our own, kept on this website’s server, and holds nothing about you. The fonts, pictures and scripts are all served from this website’s own server. No connection is made to Google Fonts or any other provider. The newsletter form sends your address to this website’s own server too. Only from there does it go on to our email service (section 8).

Where this website links to other sites, nothing is sent to them until you click the link. From then on, that site’s privacy policy applies.

10. Contacting us

If you email us, we keep what you send, including your contact details, to answer you and to deal with follow-up questions. The legal basis is our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR where your message concerns a contract. We delete it once it’s no longer needed for that, or when you ask us to, unless a statutory retention period applies.

11. Encryption, storage and decisions

The website is served over an encrypted connection (HTTPS), so what you request can’t be read in transit.

Unless a shorter period is given above, personal data is kept only as long as its purpose requires. You don’t have to provide any personal data to use this website. The access data in section 4 is sent by your browser automatically and is technically needed to deliver the pages. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Your rights

You have the right to:

• access the personal data we hold about you (Art. 15 GDPR)
• have it corrected (Art. 16 GDPR)
• have it deleted (Art. 17 GDPR)
• have its processing restricted (Art. 18 GDPR)
• receive it in a common, machine-readable format (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)

To use any of these rights, write to us at the email address in section 1.

If you think your data has been processed unlawfully, you can complain to a supervisory authority. For us, that is the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
Austria
www.dsb.gv.at

You can also complain to the authority in the EU country where you live or work, or where the alleged infringement took place.

13. Changes

We’ll update this notice if the website or the law changes, for example if the site ever gets a contact form. The version on this page is the one that applies. This version dates from 6 November 2026.