Privacy Policy
Last updated: September 28, 2026
ReviewDeck is operated by Adam Broder, United Kingdom, acting as the data controller for the purposes of this policy. Contact: [email protected].
1. No accounts, no server
ReviewDeck is an offline, file-based tool. There are no user accounts, no sign-in, and no ReviewDeck server that receives your content. Your media, reviews, notes, and settings are stored locally on your device or on storage locations you choose (such as your own network drive). ReviewDeck has no access to them.
2. Review files and the web portal
Review files you send travel through channels you choose (email, chat, shared drives); they are never uploaded to ReviewDeck. The optional web portal at portal.reviewdeck.app opens review files entirely in your browser: after the page loads, it is blocked from all network access, nothing is uploaded, and no analytics run there. You can verify this yourself in your browser's network tab.
3. Anonymous usage statistics
To learn which features are used and guide development, the app counts feature usage anonymously.
- What is sent: event names with counts (for example "note_add: 5"), the app version, and the operating system family.
- What is never sent: file names, paths, media, note text, project names, personal information, or any device or install identifier. The counts cannot be linked to you.
You can turn this off at any time in Settings → Privacy & usage, and the app shows a notice about it on first launch. People you send reviews to are never counted: the standalone review files and the web portal contain no analytics at all.
4. Licence usage reports (Team and Studio licences only)
If you buy a Team or Studio licence, the licensed copies of the app report licence usage to ReviewDeck about once a day, so that the machines using it can be counted against your level (and listed for you on request). This is separate from the anonymous counts in section 3 and only ever happens for a library that holds a licence file.
- What is sent: your licence id, a random per-install machine token (created only when a licensed library is first opened), a hashed identifier for the library (no path), the app version and the operating system family.
- What is never sent: file names, paths, media, note text, project names, or the names of people using the library.
- What we keep: the purchase email and organisation name from the purchase (to deliver the licence and answer your licence questions), and the machine and library rows above for 12 months from last sight. Everything for a licence is deleted on request, or 90 days after a refund.
- Why there is no toggle: the report is a term of the paid licence and powers the machine count the licence is priced on. The free app sends nothing of this kind and never creates a machine token.
5. Updates and downloads
The app may check for updates via a secure connection to GitHub; no personal data is transmitted. The download link on this website counts downloads anonymously (a number goes up). No personal data is collected there either.
6. This website
This website uses no analytics, tracking pixels, or advertising cookies. Fonts are loaded from Google Fonts, which involves your browser requesting font files from Google's servers.
7. Third-party services
ReviewDeck does not share your data with any third parties for marketing, advertising, or profiling. The anonymous usage counters described in Section 3, the licence reports in Section 4, this website, and the web portal are served by infrastructure hosted on Cloudflare; only the anonymous data described above is processed there. Payment processing for Team and Studio licences is handled by Paddle, who acts as the merchant of record and has its own privacy policy.
8. Contact
For questions about this policy, email [email protected].