Privacy Policy

Last updated: 3 June 2026

Penslide ("we", "us", "our") is operated from the United Kingdom. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

1.1 Website Visits

When you visit our website, we may collect standard web server log data, including your IP address, browser type, referring page, and pages visited. We use this information to understand how visitors use the site and to improve the experience.

1.2 Downloads

When you download Penslide, we record a one-way hash of your IP address, your browser user agent, and the referring page. We do not store your raw IP address. This data helps us understand download volume and sources.

1.3 Anonymous App Startup Ping

When the PenSlide desktop app starts, it may send a small anonymous startup ping to https://penslide.com/app-ping.php. The current desktop app sends app startup events to this endpoint and the current app version is 1.0.8.

The app does not transmit personal information in this startup ping. The server receives the normal IP address that is technically part of any internet request, but we do not store the raw IP address. We immediately store only a SHA-256 hash of it.

The anonymous startup ping is used to check whether downloaded apps are actually opened and used. We collect only the following information:

• Event name, currently app_started.
• App name, currently PenSlide.
• Edition, such as free.
• App version, such as 1.0.8.
• Operating system, such as Windows.
• A SHA-256 hash of the random install ID.
• A SHA-256 hash of the IP address.
• Standard user agent string.
• Created date and time of the ping.

We do not store the raw install ID or the raw IP address.

This helps us understand basic anonymous usage, such as total app starts, approximate unique installs, versions in use, operating systems, and starts by day.

We do not collect screenshots, drawing content, files, names, email addresses, clipboard content, exact drawing activity, what you annotate, which apps you use PenSlide over, or any content from your screen.

1.4 Chrome Extension

PenSlide is also available as a Chrome browser extension called PenSlide Browser Annotator. The extension is designed for drawing and highlighting directly inside Chrome web pages. According to the Chrome Web Store listing, the extension developer has disclosed that the extension does not collect or use user data.

1.5 Contact Form

If you contact us through our contact form, we collect your name, email address, and the content of your message. We use this data solely to respond to your enquiry. We also collect a reCAPTCHA score to prevent spam; this is processed by Google under their own privacy policy.

We also use Google reCAPTCHA v3 on the download acceptance page to reduce automated abuse of the download endpoint.

1.6 Cookies

We use cookies as described in our Cookie Policy. You can manage your cookie preferences at any time.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and maintain the website.
• To respond to your enquiries and provide support.
• To analyse website usage and improve our service.
• To understand anonymous desktop app startup volume, versions, and operating systems.
• To prevent spam and abuse of our contact form.

We do not sell, rent, or trade your personal information to third parties. We do not use your data for marketing purposes unless you explicitly consent.

3. Legal Basis for Processing

Under the UK GDPR, we process your data on the following legal bases:

• Legitimate interest: download tracking, anonymous app startup statistics, security logging, spam prevention, and basic operation of the website help us keep Penslide reliable and safe.
• Consent: cookies that are not strictly necessary require your consent.
• Legitimate interest or pre-contract steps: responding to your contact form messages, depending on the nature of your enquiry.

4. Data Retention

Contact form submissions are retained for up to 24 months, after which they are deleted or anonymised. Download event logs and anonymous app startup ping events are retained for up to 12 months. Website analytics data is retained according to the retention settings of our analytics providers.

5. Third Party Services

We use the following third party services that may process your data:

• Google Analytics: website usage analytics. Data is processed under Google's privacy policy.
• Google reCAPTCHA v3: spam prevention on the contact form. Processed under Google's privacy policy.
• Ahrefs Analytics: website traffic analysis.

These services may use cookies and collect data as described in their respective privacy policies.

6. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to be forgotten).
• Object to or restrict the processing of your data.
• Data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us through the contact form.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been breached. You can find the ICO at ico.org.uk.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

Some third party services, including Google Analytics, Google reCAPTCHA, and Ahrefs Analytics, may process data outside the United Kingdom. Where this occurs, the relevant provider is responsible for using appropriate safeguards under UK data protection law.

9. Children's Privacy

Our website and software are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us through the contact form on our website.