Legal
Privacy policy
Last updated 31 August 2026
SelfDeck is a product about choosing what you reveal. It would be odd to build that on top of surveillance, so we collect as little as we can get away with.
What we store
Your account
Your email address, and the name and any details you enter during setup. Your email is used to sign you in and to contact you about the service. We don't send marketing email.
Your decks and sections
Whatever you write into them. This is stored so we can show it back to you and to the people you share it with. We don't read it, sell it, or use it to train anything.
Share link views
When someone opens one of your share links, we record that a view happened, which link it was, and when. We do not record who opened it. No account, no name, no profile. If a link you named “For friends” has forty views, you can infer it travelled; you cannot see a list of people, because we never made one.
Contact requests and shares sent to you
If someone asks for your contact details, we store the name, email and message they chose to give you. If another SelfDeck user shares a deck with you directly, we store that it happened so it can appear in your notifications.
Site analytics
We use Vercel Web Analytics on our public pages to see how many people visit and which pages they arrive on. It is cookieless and does not build a profile of you or follow you across other sites, which is why this site has no cookie banner.
What we don't do
- No advertising, and no selling or renting your data to anyone.
- No third-party tracking pixels or advertising cookies.
- No tracking of individual viewers of your decks.
- No building a social graph out of who viewed what.
Who else touches your data
We rely on a small number of providers to run the service:
- Supabase holds the database, handles sign-in, and stores files.
- Vercel hosts the site and provides the privacy-preserving analytics described above.
- Resend sends your sign-in emails.
Each of these processes data on our instructions in order to provide the service, and for no other purpose.
How long we keep it
Your content stays until you delete it. Deleting a deck removes it and its share links; sections you reused elsewhere survive in your library and in any other deck that uses them. Ask us to delete your account and we'll remove your decks, sections, links and view records.
Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll help. We won't make you jump through hoops.
Security
Data is encrypted in transit. Share-link passwords are stored only as bcrypt hashes, never in plain text, and are never sent back to the browser. Access to your decks is enforced in the database itself, not only in the app, so a bug in the interface can't expose another user's content.
No system is perfectly secure. If we ever have a breach affecting your data, we'll tell you.
Children
SelfDeck isn't intended for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes materially we'll update this page and the date above.
Contact
Privacy questions or requests: hello@selfdeck.app