Source Access, Permissions & Website Privacy

Document links and source access

When you convert a sharing link, the server receives that URL and contacts the source service to retrieve the document or its accessible page images. It cannot use your signed-in browser session. Source services receive those retrieval requests and may log them under their own policies.

Protected sharing links may ask for a visitor email, a link password, or email verification. These details are sent to the source service when you choose to continue. Temporary source cookies remain scoped to that service; encrypted verification sessions expire after ten minutes. We do not log credentials or request your signed-in browser cookies or provider account password.

A password inside a PDF is handled by an isolated worker in your browser and is not sent to the server. Google links must be publicly accessible and allow downloading. DeckExport does not connect to your Google account. To work with a private Google file, download it through your authorized Google session and upload the file here.

Product usage counts

DeckExport uses Cloudflare Analytics Engine to count conversion attempts, prepared PDFs, started downloads and Google PDF-link tool actions. These counts help us understand which guides lead to useful results. A started download does not confirm that a file finished downloading, and generating a Google link does not confirm access to its document.

Events contain fixed labels for the action, supported source type, page, landing page, broad referral category, result and a count range. Conversion diagnostics also include the stage, elapsed time and HTTP status where available. We do not include document links, file names, document content, source credentials, raw referrers, IP addresses or user identifiers in these event fields. Cloudflare still receives the network request as our hosting provider.

Your browser keeps the landing-page and referral labels in tab session storage, with attribution expiring after 30 minutes and no unique identifier or analytics cookie. The product event collection is disabled when your browser sends Do Not Track or Global Privacy Control. Sample-document actions and our marked quality checks are separated from ordinary usage counts.

Application logs

We keep application logs in Cloudflare to check whether source retrieval, page capture, PDF saving and browser actions succeed. Logs include fixed action and provider labels, processing stages, outcomes, timing and status codes. Server requests receive a random operation identifier to connect their start and result; this is not a visitor identifier and is not reused between requests.

These application logs exclude document links, file names, contents, passwords, email addresses and raw errors. We suppress application event logging for Do Not Track and Global Privacy Control. Hosting request handling and ordinary network data remain separate.

Hosting and website analytics

Cloudflare hosts the site. The website includes Cloudflare’s Web Analytics beacon to measure page visits and performance. Cloudflare describes the analytics service here; its privacy policy explains its broader data handling.

Ordinary network and hosting data may be processed to serve and protect the website. DeckExport does not send document contents to the analytics beacon as application event data. We do not claim that a visit or source retrieval is anonymous or untracked.

The Google PDF-link generator is different

The link generator builds a URL in your browser. Generating a link does not fetch, or convert a document. Its Open in Google action takes you directly to Google, where your browser session and the source permissions apply.