Privacy Policy

This policy explains how NMC Atelier operates ShrinkNote Web Shrink. Web Shrink is a browser-based service: Keynote decks are uploaded and compressed on ShrinkNote's server. The browser performs only a limited preflight estimate.

1. Data we process

Depending on how you use Web Shrink, we process:

• the Keynote deck you select, including its filename, size, contents, and archive metadata;
• an email address when you request watermarked delivery or complete a purchase;
• order, payment-status, and delivery records;
• IP address, browser-session identifiers, security-verification results, and rate-limit data;
• operational diagnostics and usage events needed to secure and improve the service.

2. What happens to a deck

Your browser may read a bounded amount of ZIP metadata to estimate likely savings. That estimate stays in the browser except for the estimate values submitted with the job. The browser does not compress the deck.

The original deck uploads over HTTPS to Cloudflare R2. Uploading alone does not start compression. ShrinkNote's server processes the uploaded deck only after you request a watermarked result by email or payment authorizes a clean result.

3. Why we process data

We use the data described above to:

• validate, compress, store temporarily, and deliver your requested result;
• calculate price and confirm payment;
• send result, failure, and expiration-related emails;
• prevent abuse, enforce upload limits, diagnose failures, and maintain reliability;
• meet accounting, fraud-prevention, and legal obligations.

4. Providers and operational systems

Cloudflare provides website delivery, Turnstile verification, and R2 object storage. Lemon Squeezy is the third-party payment processor for clean downloads. Resend is the third-party email delivery provider.

NMC Atelier operates its own Plausible analytics, OpenReplay session diagnostics, and GlitchTip error-monitoring services. These are first-party, self-hosted operational systems. OpenReplay respects the browser's Do Not Track setting and obscures email-like and numeric text. Operational diagnostics can still include page interactions, technical errors, job identifiers, and deck filenames shown in the interface.

5. Retention and deletion

Default artifact-availability windows are:

• 24 hours for an upload that has not been authorized by email or payment;
• 48 hours after a watermarked-email request;
• seven days after purchase for a paid result.

Download access expires at the job's expiration time. Automated cleanup removes expired artifacts, with storage lifecycle rules as a backstop. Cleanup is periodic, so physical deletion may occur after—not at the exact moment of—the stated expiration. Limited transaction, email-delivery, security, and aggregate operational records may be retained longer when needed for accounting, fraud prevention, support, or legal compliance.

6. What we do not do

We do not sell presentation content, use uploaded decks for advertising, or use deck contents to train artificial-intelligence models. We do not begin compressing an upload merely because it reached storage.

7. Security

Uploads and downloads use encrypted HTTPS connections. Storage keys and result tokens are scoped to individual jobs, and access is rate-limited and protected by Cloudflare Turnstile. No online system can be guaranteed completely secure, so keep your original deck and avoid uploading material you are not authorized to process.

8. Your choices and rights

You may choose not to submit an email or payment; the unclaimed upload will expire without being compressed. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal data. Contact privacy@shrinknote.com.

9. Changes and contact

We may update this policy as the service changes. The current version and effective date will remain posted here. Privacy inquiries: privacy@shrinknote.com.