Privacy Policy
Last updated: June 2026
In short
unPaper runs entirely in your browser. The content you type, paste, generate, print, or convert to PowerPoint is never uploaded, stored, or transmitted to us. There are no user accounts, no analytics, and no tracking cookies. We genuinely do not see your documents.
Don't trust it – verify it
A privacy claim should be checkable. Three ways to check ours, in increasing order of rigor:
- The offline test. Open the PowerPoint converter, let the page load, then switch off your internet connection. Convert your deck. It completes – because nothing is sent anywhere.
- The network tab.Open your browser's developer tools (Network tab) while you use the tools. After the page assets load, no requests carry your content.
- The source code.unPaper's code is public – the entire site, including the conversion engine, is readable at github.com/mitsue-eth/unpaper.
The HTML files unPaper produces are self-contained and make no network requests of their own, so they remain safe for confidential work even after they leave the tool.
1. Controller
The controller responsible for this website is:
reHeritage GmbH
c/o Margherita Natalini, Schroederstrasse 4, 10115 Berlin, Germany
E-Mail: hello@unrsnbl.ai
reHeritage GmbH has no designated Data Protection Officer as it does not meet the thresholds requiring mandatory appointment under Art. 37 GDPR. Data protection queries can be directed to the address above.
2. What we process
2.1 The tool itself
unPaper is a static, client-side application. Selecting a format, customizing a template, copying the prompt, pasting your AI's HTML back, previewing it, saving a PDF, and converting a deck to PowerPoint all happen locally in your browser. No document content is sent to any server we operate – we operate no server that receives it.
2.2 Server and access logs
When you load the page, our hosting provider (Vercel Inc.) automatically records standard access data in server logs: IP address, browser type and version, operating system, referrer URL, and the date and time of the request. This is technically necessary to deliver the website and to detect and prevent abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Vercel retains these logs for a short period per its policy; we do not separately evaluate them unless a security incident requires it.
2.3 Local storage (your preferences)
To remember your choices between visits (format, theme, background, and the header/footer text you enter), unPaper stores a small settings object in your browser's local storage. This data stays on your device, is never sent to us, and contains no personal data beyond what you type into those fields. You can clear it at any time via your browser settings. We use no advertising, analytics, or tracking cookies.
3. Third-party processors
We rely on a single processor to host the site. Where data is transferred to the United States, such transfer is covered by the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Vercel Inc. | Hosting, CDN, delivery | IP, access logs | USA (SCC) |
We do not sell personal data and do not share it beyond the processor listed above.
4. External links
The footer links to YouTube (Google LLC) and to our companion site unrsnbl.ai. We embed nothing from them – these are plain links. If you follow them, the privacy policy of the destination applies. We are not responsible for the content or data practices of third-party sites.
5. Your rights under GDPR (Art. 15–22)
Because we hold essentially no personal data about you (beyond short-lived server logs held by our host), there is in most cases nothing for us to access, rectify, or erase. Where applicable, you have the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise any of them, contact hello@unrsnbl.ai; we respond within one month (Art. 12(3) GDPR).
You also have the right to lodge a complaint with a supervisory authority. Ours is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin
www.datenschutz-berlin.de
6. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. No decisions with legal or similarly significant effects are made about you automatically.
7. Changes to this policy
We may update this policy if our practices change. The "last updated" date above reflects the most recent revision.