Privacy Policy

unPaper runs entirely in the browser on your computer. The content you type, paste, generate, print, or convert to PowerPoint is never uploaded, stored, or transmitted to us. There are no user accounts and no cookies. We use Vercel Web Analytics for anonymous, aggregate page-traffic measurement; it never receives your prompts, documents, HTML, PowerPoint files, brand kits, or other content. The fonts are served from our own site. We genuinely do not see your documents.

In the converter, the HTML file stays on this machine and the PPTX is generated inside your browser on this machine. Browser-based does not mean server-based here.

A privacy claim should be checkable. Two ways to check ours, in increasing order of rigor:

• The offline test. Open the PowerPoint converter, load your deck, then switch off your internet connection. Convert. It completes because the work happens locally.
• The network tab.Open your browser's developer tools (Network tab) while you use the tools. You may see a small Vercel Analytics page-view request, but no request carries your prompt, deck, document, or converted file.

The HTML files unPaper produces are self-contained and make no network requests of their own, so they remain safe for confidential work even after they leave the tool.

The controller responsible for this website is:

reHeritage GmbH
c/o Margherita Natalini, Schroederstrasse 4, 10115 Berlin, Germany
E-Mail: hello@unpaper.ai

reHeritage GmbH has no designated Data Protection Officer as it does not meet the thresholds requiring mandatory appointment under Art. 37 GDPR. Data protection queries can be directed to the address above.

2.1 The tool itself

unPaper is a static, client-side application. Selecting a format, customizing a template, copying the prompt, pasting your AI's HTML back, previewing it, saving a PDF, and converting a deck to PowerPoint all happen locally in the browser on your computer. No document content is sent to any server we operate – we operate no server that receives it.

2.2 Server and access logs

When you load the page, our hosting provider (Vercel Inc.) automatically records standard access data in server logs: IP address, browser type and version, operating system, referrer URL, and the date and time of the request. This is technically necessary to deliver the website and to detect and prevent abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Vercel retains these logs for a short period per its policy; we do not separately evaluate them unless a security incident requires it.

2.3 Cookie-free website analytics

We use Vercel Web Analytics to understand whether people visit unPaper, which public pages they use, where visits are referred from, and broad technical information such as country, browser, operating system, and device type. We remove query parameters and URL fragments before an analytics page view is sent. We do not send names, e-mail addresses, account identifiers, prompt text, document content, filenames, or conversion contents, and we do not currently attach user-authored data to custom analytics events.

Vercel Web Analytics uses no cookies. Vercel derives a daily visitor hash from the incoming request; it cannot follow a visitor across different websites or different days, and the visitor session is discarded after 24 hours. The resulting reports are aggregate rather than individual profiles. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring the reach and improving the operation of a free public service).

2.4 Local storage (your preferences)

To remember your choices between visits — your chosen format and theme, and the text you type into the brief and header/footer fields — unPaper stores a small settings object in your browser's local storage. This data stays on your device, is never sent to us, and contains no personal data beyond what you type into those fields. You can clear it at any time via your browser settings.

We set no cookies and use local storage only for functions you actively invoke — never for analytics or advertising. Our analytics does not set or read cookies or analytics identifiers on your device. The functional storage is strictly necessary for the tool you are using (cf. § 25(2) TDDDG), so no cookie-consent banner is shown.

We rely on a single processor to host the site. Where data is transferred to the United States, such transfer is covered by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

We do not sell personal data and do not share it beyond the processor listed above.

The footer links to YouTube (Google LLC) and to our companion site unrsnbl.ai. We embed nothing from them – these are plain links. If you follow them, the privacy policy of the destination applies. We are not responsible for the content or data practices of third-party sites.

Because we hold no accounts or document content and Web Analytics is aggregate, there is usually no profile we can connect to you. Beyond short-lived server logs held by our host, there is in most cases nothing for us to access, rectify, or erase. Where applicable, you have the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise any of them, contact hello@unpaper.ai; we respond within one month (Art. 12(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority. Ours is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin
www.datenschutz-berlin.de

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. No decisions with legal or similarly significant effects are made about you automatically.

We may update this policy if our practices change. The "last updated" date above reflects the most recent revision.