Privacy Policy

Last updated: 5 October 2026

This policy explains how YASF (Yet Another Slideshow Factory) handles information when you use yasf.app or the YASF Chrome extension. The person responsible for this service is Bernabe Roriguez. For privacy questions or requests, contact [email protected].

Information we use

• Account details such as your email, display name, authentication identifier and sign-in provider. Google sign-in shares the basic account information you authorize; we do not receive your Google password.
• Your product links, product briefs, topics, creative preferences, slideshow text, language versions and uploaded photos.
• Credit balances, generation history and payment references, including the amount and currency confirmed by our payment provider. Card information is handled by Dodo Payments, not stored by YASF.
• Technical information needed to operate and protect the service, including session cookies, request logs, IP addresses and error information.

Connected AI assistants

If you connect YASF to ChatGPT, Codex, Claude or another supported agent, the connection can read your saved products, slideshow text, credit balance and generation status, edit text you ask it to change, and prepare production or translation requests. You sign in to YASF and approve the connection's permissions. You may also enable persistent direct-action permission with a daily credit limit: requested analysis, generations and translations can then run without approving each request on the website. Without that permission, individual request approval is required. Only a signed-in YASF web session can change the connection's permission or spending limit. The agent receives the results needed for your task; YASF does not request access to your complete conversation history.

OAuth authorization codes expire after one minute, access tokens after one hour, and connections after 30 days. We store hashes of access and refresh tokens, not their plaintext values. Temporary authorization and action records have expiration timestamps and scheduled deletion fields. Operational usage and credit records may be retained to investigate abuse or reconcile transactions. You can revoke connected agents at Connected agents; revocation blocks further access but does not delete already delivered files or information in the assistant's conversation.

Download links created for an assistant expire after 30 minutes. Anyone receiving such a link can access the corresponding export until it expires. Do not publish a private download link. The assistant provider handles the conversation and returned data under its own privacy policy.

Why we use it

We use this information to provide your account, create and save slideshows, process credit purchases, support you, maintain the service and prevent fraud or abuse. Where applicable, processing is based on providing the service you request, our legitimate interest in operating and securing it, legal obligations, or your consent for optional features.

AI, hosting and payments

YASF uses Google Firebase and Google Cloud for authentication, hosting, storage and database services. Product details and creative inputs are sent to Google's Gemini API to create text and images. When you choose stock or personal photos as slide backgrounds, those photos may also be sent to Gemini as visual context for the accompanying text.

Dodo Payments processes purchases and provides the payment information needed to credit your account. Service notifications may be sent to an internal Discord channel for operational support. These providers process information under their own terms and privacy policies. Some infrastructure is outside the European Economic Area, including photo storage in the United States.

Your work and public links

Your account's edits, uploaded photos and private decks are not published to other users by default. A free original may be reused for the same public product link; private edits are kept separate. If a deck is published using the public sharing feature, anyone with its public link can view that shared version. Temporary phone-transfer links also allow access to the specific export while the link remains valid. Do not upload sensitive information you do not want processed.

Cookies and the local cropper

Essential cookies and browser storage keep you signed in, remember preferences and preserve your work. With your optional analytics consent, the website uses Umami Cloud to count visits to public home pages, blog pages and the photo cropper, including their language versions. We do not track the generation flow, accounts, deck editors, public claims or admin pages through Umami, and do not identify your YASF account in analytics.

The Umami analytics payload includes the public page path, site language, screen dimensions and, when available, the external referring site's origin. It excludes URL queries and fragments, internal referring paths, product submissions, account identifiers, deck text and photos. Umami receives the network information necessary to process these requests. Umami does not collect clicks, session replays or custom activity events. You can withdraw analytics consent from Privacy in the app; browser Do Not Track and Global Privacy Control are also respected.

With the same optional analytics consent, Google Analytics provides a separate source of website usage statistics, including pageviews and selected actions such as submitting a product link, starting a generation, downloading, claiming a deck or beginning checkout. Our configured Google Analytics events use public page paths or a generic /app path instead of private deck identifiers or submitted product URLs. Google Analytics may use analytics cookies; Google Signals and advertising personalization are disabled. We do not identify your YASF account in these events. Withdrawing consent disables both analytics providers and clears the website's Google Analytics cookies.

The standalone photo cropper processes your photos in your browser and does not upload them to YASF. Optional public pageview analytics does not change that local image-processing behavior.

Chrome extension

The extension opens a locally bundled YASF Studio in a browser tab. It does not read your active tab's URL, read your browsing history, monitor other tabs, or extract another page's contents in the browser. Nothing is analyzed merely because you open the extension: you submit a product link before requesting analysis. YASF's server then retrieves that public product page to create the product brief.

Browser storage retains the authentication session, an opaque YASF session identifier and interface preferences. Google sign-in uses a separate secure page on yasf.app to complete authentication. Account information, submitted product details, creative inputs and uploads are processed by the same YASF services described above. API requests use HTTPS. The extension does not request location permissions; server security logs may contain IP addresses. Payments are completed on the payment provider's page, not inside a card form controlled by the extension.

The extension does not include optional analytics or advertising trackers. Operational records, including account creation, generations, credit purchases and errors, are used to provide the service and prevent abuse. It does not record your keystrokes, mouse movements or unrelated browsing activity.

Chrome Web Store Limited Use

YASF's use of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use and transfer this information only to provide or improve the slideshow features you request, protect the service against fraud or abuse, or comply with applicable law. We do not sell extension user data or use it for personalized advertising, creditworthiness assessments or lending. Human access to extension user data is limited to your consent for support, necessary security investigations, legal obligations, or aggregated and anonymized internal operations as permitted by that policy.

Retention and your choices

Account and slideshow data are retained to provide your saved library. You can contact us to request access, correction or deletion of your personal information and account. Some payment, security or legal records may need to be retained for applicable obligations. Depending on your location, you may also have rights to restrict or object to processing, data portability, withdrawal of consent, and a complaint to your data protection authority.

For a request, write from the email associated with your account. We may need to verify your identity before acting on it.