Privacy

The short version

We collect what is needed to run an account and a catalogue: your name, your email address, and a record of what you bought. Payment details never reach us. Analytics is stored with hashed identifiers rather than raw IP addresses.

What we hold

• Account: first name, last name, email address, a hashed password, when you confirmed your address, and when you last signed in.
• Purchases: what Gumroad tells us about a confirmed sale — product, order number, amount, currency, country, refund and dispute status, and the buyer email on the order.
• Activity: favourites, recently viewed templates, and search terms, so the store is useful and so we know which templates to make next.
• Support: messages you send us and our replies.

What we never hold

• Card numbers, expiry dates or security codes. Gumroad handles payment end to end.
• A postal address. Nothing is shipped, so there is nothing to ship it to.
• Your password. Only a one-way hash is stored, which cannot be read back.

Analytics

First-party analytics records page and template views, searches, buy clicks and confirmed purchases. IP addresses, user agents and session identifiers are stored only as keyed hashes, so a database dump cannot be turned back into a list of visitors.

Third-party analytics (Google Analytics, Meta or TikTok pixels) are optional and off unless the store owner has configured them. Where they are enabled and consent is required, nothing loads until you allow it. See cookies.

Who else sees your data

• Gumroad — processes your payment and delivers your file. Their privacy policy governs what they collect at checkout.
• Our hosting and email providers — store the database and send transactional email on our behalf.

We do not sell personal data, and we do not share it for anyone else’s advertising.

How long we keep it

• Account and purchase records are kept while the account exists, and afterwards where accounting rules require it.
• Raw analytics events and search rows are pruned automatically after twelve months; only anonymous daily totals survive.
• Unconfirmed newsletter signups are deleted after fourteen days.

Your controls

• Edit your name from your profile.
• Change your email address; the new one has to be confirmed before it takes effect.
• Turn marketing email off from email preferences. Purchase and account email is always sent, because it is part of the service.
• Ask us for a copy of your data, or ask us to delete your account, by writing to contact@slideforge.store.

Security

Passwords are hashed, sessions are signed, admin areas are gated server-side, and all traffic in production runs over HTTPS. No system is perfect; if you spot a problem, tell us and we will look at it.