ArtDeck TestFlight

Privacy

Privacy Policy

This page covers the ArtDeck app for iPhone, iPad, and Mac, plus the websites, roadmap voting, and support emails.

Last updated: July 17, 2026

Who I am

ArtDeck is made by me, Alexandre Alves, an independent developer based in France. This policy covers the ArtDeck app for iPhone, iPad, and Mac, and the websites at getartdeck.com and docs.getartdeck.com.

For personal data handled by ArtDeck, I am the data controller. Some user-requested features also involve third-party services, such as Apple iCloud or websites you ask ArtDeck to contact for previews; those services handle data under their own privacy policies.

For privacy questions, email privacy@getartdeck.com. For support or bug reports, email support@getartdeck.com.

ArtDeck app

ArtDeck is designed so your reference boards stay with you. The app has no ArtDeck account system, no ads, no tracking, and no third-party advertising SDKs.

No account, ads, or tracking

You can use ArtDeck without creating an ArtDeck account or signing in to a developer-operated service. ArtDeck does not operate a backend that stores your boards, and it does not use your app activity for advertising or tracking.

Local app data

Your boards and the content you add to them are stored locally on your device unless you choose to sync, export, or share them. Board content can include images, GIFs, videos, PDFs, links, text, drawings, notes, and other files you choose to add.

ArtDeck does not receive a copy of your local boards on an ArtDeck server.

Optional iCloud sync

If you enable iCloud sync, board data and assets sync through your iCloud using Apple iCloud and CloudKit services, including the container iCloud.com.getartdeck.ArtDeck. ArtDeck does not operate a separate sync server.

Apple provides and controls iCloud. You can manage or delete iCloud app data through your Apple device and iCloud settings.

Photos, Files, Camera, and imports

ArtDeck may ask for access to Photos, Files, Camera, scanning/import tools, or Continuity Camera only when you choose a workflow that needs that access. For example, you may choose to import a file, pick an image, scan a document, capture a photo, or save/export content.

If you do not grant a permission, the related workflow may not work, but the rest of the app remains available.

URL previews and remote media imports

When you add or share a URL into ArtDeck, the app may contact the linked website to fetch preview information such as the page title, metadata, preview image, favicon, or similar details. For supported video links, ArtDeck may contact the provider needed to create the preview.

When you share a remote image, video, or link into ArtDeck, the share extension may follow redirects, check the content type, and download the media you selected so it can be added to your board.

These requests are started by you and are needed to create previews or import the content you chose. The contacted website or provider may receive normal network information such as your IP address, user agent, and the requested URL. Their own privacy policies apply.

Optional feedback emails

Feedback and support emails are optional. If you choose to send one, the generated email may include app version and build, operating system, device information, locale, and accessibility display settings such as Dynamic Type or Bold Text where applicable. It also includes whatever you write or attach.

Diagnostics and system APIs

ArtDeck may keep MetricKit or performance diagnostics locally in the app for operational diagnostics. These local diagnostics are not uploaded to an ArtDeck server.

The app uses certain system APIs for app functionality, such as file timestamps, disk space, preferences, and elapsed timing. These APIs are not used for tracking.

Websites

The websites at getartdeck.com and docs.getartdeck.com are separate from the app. Both use a small amount of data for website analytics. The main website also uses data for roadmap voting.

Website analytics

I use self-hosted Umami, opens in a new tab analytics to understand which pages are visited on the main website and documentation website. Umami collects the page path and title, referrer, device type, browser, operating system, screen size, language, and country derived from IP address. Query strings and URL fragments are excluded. IP addresses are not stored.

Umami does not use cookies and does not track you across websites. Each website uses a separate analytics identifier. The analytics data is not connected to an ArtDeck account or app activity, and it is hosted in Germany.

Roadmap voting

The roadmap lets visitors vote on possible future features. To prevent duplicate votes, the website creates a random anonymous identifier in your browser local storage. When you vote, your browser sends that identifier and the selected feature to the vote API, and the vote record is stored in the website database.

The identifier is not tied to an ArtDeck account, name, or email address. The vote API may process your IP address temporarily for rate limiting, but the IP address is not stored in the vote record.

When GDPR applies, ArtDeck relies on a small set of legal bases for the processing described in this policy:

  • Your consent: optional app permissions where your device asks you to grant access.
  • Providing the feature you request: imports, exports, URL previews, remote media imports, optional iCloud sync, and support replies.
  • Legitimate interests: privacy-friendly website analytics, roadmap voting and duplicate-vote prevention, rate limiting, security, local diagnostics, and support history. These uses are kept limited and do not override your privacy rights.

Data sharing and third parties

ArtDeck does not sell personal data. Service providers that process personal data for ArtDeck are used only for the purposes described in this policy, and I rely on their applicable privacy, security, and data processing commitments for the service they provide.

Outside websites and video providers are different: they are contacted only when you ask ArtDeck to create a URL preview or import remote media, and their own privacy policies apply to those network requests.

  • Apple/iCloud: used for optional iCloud sync when you enable it, and for Apple platform services such as App Store purchases.
  • Websites and video providers: contacted only when you ask ArtDeck to create a URL preview or import remote media.
  • Umami and website infrastructure providers: used for privacy-friendly analytics, hosting, databases, and roadmap voting as described above.
  • Email providers: used when you choose to send support, bug report, feedback, or privacy emails.

Retention and deletion

  • Local board data: controlled by you. You can delete boards, remove content, delete the app, or manage device storage through your device settings.
  • iCloud data: controlled through the app, your device, and iCloud settings. Deleting local data may not delete every synced or backed-up copy unless you also manage the corresponding iCloud data.
  • Website analytics: kept for no longer than 24 months. Analytics records older than 24 months are deleted on a recurring schedule.
  • Support and feedback emails: kept only as long as needed to answer your request and keep a reasonable support history, or longer if required for legal, safety, or security reasons.
  • Roadmap votes: kept while the roadmap feature is active or while vote counts remain useful. Clearing browser local storage removes the local voting identifier from your browser, but it does not automatically remove a vote already submitted to the website database. If you ask me to delete a submitted vote, I can only find it if you can provide the voting identifier from your browser before it is cleared.

Your rights

If you are in the European Union or another region with similar privacy rights, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, object to certain processing, and withdraw consent where processing is based on consent.

To exercise your rights, email privacy@getartdeck.com. I will respond within 30 days where required by law.

You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL, opens in a new tab.

Changes to this policy

I may update this policy as ArtDeck changes. When I do, I will update the date at the top of this page. If a change materially affects how I handle personal data, I will provide additional notice where appropriate.

← Back to home