DeSlop Privacy Policy

The short version

The extension does not collect, transmit, store, or sell your LinkedIn posts, messages, connections, or activity. Nothing about what you read or write ever leaves your device because of DeSlop. It talks to our servers only to validate an optional supporter key, and those requests carry only the key and an opaque random device id. Separately, if you make a voluntary contribution, our license server receives the email address you used at checkout and stores it with your supporter record so we can send you your key and support you. If you never contribute, we hold nothing about you at all.

Who we are, and how to reach us

DeSlop and the Pineido brand are operated by Energetika-VDS, a company established at Janko Cvetinov 13, Strumica, North Macedonia. Energetika-VDS (trading as "Pineido", "we", "us") is the controller of the personal data described here. You can reach us about anything in this policy, including a request to see or delete your data, by email at contact@pineido.com or by post at that address.

contact@pineido.com

What we store when you contribute

A voluntary contribution is the one time we handle a piece of your personal data, so here it is in full. Paddle takes your payment and passes us the email address you used at checkout. Our license server, which is a Cloudflare Worker, then creates your unique supporter key, emails it to you through Resend (our email delivery provider), and saves a small record so the key can be validated across your devices and revoked if it is abused. That record holds your email address, a one-way hash of it, the key id, the random device ids you save it on, and the dates that happened. It never holds your name, your card details, or anything from LinkedIn. The extension itself still collects nothing.

Why we are allowed to process it (legal basis)

• Your contribution email, supporter record, and device ids: to give effect to your voluntary contribution, deliver your supporter key, and support you (GDPR Art. 6(1)(b), or our and your legitimate interest under Art. 6(1)(f)).
• Server logs, including IP addresses, held briefly by Cloudflare: our legitimate interest in keeping the license service secure and available, and in preventing abuse (Art. 6(1)(f)).
• Everything the extension does on your device: no legal basis is needed from us, because we never receive that data.

Who else sees it (our processors)

• Paddle, our merchant of record, processes your payment and gives us your contribution email. Paddle is a controller in its own right for the payment.
• Cloudflare hosts our website and the license server, and its logs briefly include the IP address your browser or the extension connects from.
• Resend delivers the email containing your license key.
• We do not sell your personal data, and we do not share it with anyone beyond these providers.

Paddle privacy policy

How long we keep it

We keep your supporter record, including your contribution email, for as long as your supporter key is in use, because the key has to stay verifiable. We also keep it for a period afterwards to meet the tax and accounting duties that apply to the payment. You can ask us to delete your email at any time. If you do, we will remove it and keep only the key id and the one-way hash needed to keep your key working. Server logs are short-lived and are kept by Cloudflare on its own retention schedule.

Where your data goes

Our providers are based in, or run infrastructure in, countries outside the EEA and the UK, including the United States. Where personal data is transferred out of the EEA or the UK, that transfer relies on the safeguards those providers put in place, which are usually the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for details.

What stays on your device

• Your settings, such as sensitivity and toggles.
• Your personal allow-list of people you never want filtered, stored as the profile identifiers you chose. Those identifiers are other people's names or profile ids, and they stay on your machine.
• Per-session, derived verdicts (a score and the action taken).
• Your supporter status, and a random device id we generate.
• If you turn on personal training, the short phrases and per-author counts it learns from posts you flag. If you also turn on "Keep example texts", it additionally stores a short verbatim excerpt of each post you flagged, along with the author name. That is other people's content, so it stays on your device and you can wipe it from the options page at any time. The setting is off by default.
• If you turn on the optional DM filter, DeSlop reads the text of messages already shown in your own inbox in order to add a "looks AI-drafted" hint. It happens in memory, it is never stored, and it is never transmitted. The setting is off by default and it never touches the composer or blocks sending.

What Chrome syncs for you

A small, non-sensitive item (your settings) is kept in Chrome's built-in sync storage. Chrome, not DeSlop, mirrors it across the devices where you are signed into the same Google account, so your preferences follow you instead of resetting on each machine. DeSlop never reads your Google identity, and none of this is sent to Pineido.

The network calls the extension makes

If you save a supporter key, the extension contacts our license server to claim a device slot and, periodically, to check the key is still valid. The body of those requests contains only your supporter key and the random device id. Like any web request, it also reveals the IP address you are connecting from, which our host Cloudflare sees and logs briefly. Those requests never contain your name, your email, or anything from LinkedIn. Validation fails open for a grace period, so a network problem never affects your access to any feature (every feature is free regardless of the key).

On-device AI features

DeSlop can optionally use AI features that Chrome itself provides on your device: a translator, so non-English posts can be scored fairly, and a small local language model that gives a second opinion on borderline posts. Both run inside your browser. Chrome may download its own models to make them work. No post text is sent to Pineido or to any third party by these features.

What we do not do

• The extension performs no analytics and no tracking of you or your LinkedIn feed.
• The DeSlop pages on pineido.com run no analytics and no third-party tracking either. We removed Google Analytics and PostHog, so the site sets no advertising or analytics cookies, and there is nothing to consent to.
• We never sell your personal data, and we do not use it for advertising.
• No account, no email wall, and no sign-up to use the filter.
• Pineido never receives or reads your LinkedIn content.

Permissions the extension asks for

• Local storage, to save your settings, allow-list, and license status on your machine.
• Alarms, so it can re-check your license once a day in the background.
• Access to your own LinkedIn tab, so it can filter the posts you are already looking at. Nothing else.

Keeping it safe

Your license key is cryptographically signed, and it is verified before it is accepted. Data in transit is encrypted with HTTPS. The license record is held in Cloudflare's key-value store with access restricted to our license server. If a breach ever affects your personal data and is likely to put you at risk, we will notify the relevant supervisory authority and you, without undue delay and as the law requires.

Your rights

Depending on where you live, you have the right to ask us for a copy of the personal data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. You can also object to processing we base on legitimate interests. To exercise any of these, just email us. You do not have to pay, and we will answer within the time the law allows. If you think we have handled your data badly, you can complain to your local data protection supervisory authority. In the UK that is the Information Commissioner's Office, and our home authority in North Macedonia is the Agency for Personal Data Protection (Агенција за заштита на личните податоци). You are always free to complain to us first, and we would rather you did.

contact@pineido.com

Deleting everything

You can turn DeSlop off, clear its learned data and allow-list from the options page, and uninstall it at any time, which removes everything it stored on your machine. To remove the contribution email we hold on our server, email us and we will delete it.

contact@pineido.com

Children

DeSlop is not aimed at children. You need to be old enough to hold a LinkedIn account and to enter a contract where you live. We do not knowingly collect personal data from children.

Changes to this policy

If we change how DeSlop handles data, we will update this page and the date at the top. If the change is significant, we will say so on the DeSlop product page. Continued use after a change means you accept the updated policy.