Privacy Notice

1. Controller and contact

Boris Shkolnikov, a UK sole trader, controls website, trial, purchase and support data. For privacy requests, write to 13 Kyrle Road, London, SW11 6BD, United Kingdom or email shk.boris.uk@gmail.com.

Where a customer puts other people's personal data in HTML, that customer may be the controller and Presswork may be a processor. No customer-content data processing agreement is currently in force. Do not submit that material until a separate agreement and safeguards are agreed.

2. Data and sources

• HTML and PDF: your submitted HTML and embedded images are sent from your browser or API client to our isolated renderer solely to produce the requested PDF. A playground draft is saved in your browser, not an online draft account.
• Trial, job and security records: a browser ownership cookie, keyed address hashes for daily abuse limits, job identifiers, status, timing, quota, content hash and safe error code. Job metadata does not contain the HTML, document title, source URL or plaintext API key.
• Purchases if enabled: Stripe payment references and payment/refund state, API-key hash, pass usage and expiry. Stripe takes card data; we do not receive full card numbers.
• Support: email, category, message and originating page you submit, plus our reply. Do not send HTML, customer data, keys, cards or secrets.
• Optional analytics: with consent, page views and limited product events; no document body, key, support message or payment-card data.

3. Purposes and lawful bases

• Make and deliver the PDF you request and, if enabled, provide a paid pass: steps requested before a contract or performance of a contract.
• Limit abuse, secure access, diagnose errors and measure whether the service works: our legitimate interests in a safe, reliable service.
• Answer support, access and refund requests: contract when relevant, otherwise legitimate interests in helping users.
• Keep applicable transaction, tax or dispute records if sales open: legal obligation or legitimate interests, as applicable.
• Run Google Analytics if configured and allowed: your consent, which you can withdraw.

We do not sell personal data, use customer HTML to train an AI model or make solely automated decisions with legal or similarly significant effects.

4. Browser storage and cookies

The playground saves a draft in local storage until you reset it or clear this site's browser data. An HTTP-only browser ownership cookie lasts up to 30 days and supports the trial. If checkout opens, access and receipt state may use cookies or browser storage. Clearing them can remove proof needed to recover access; retain your receipt separately.

Google Analytics cookies are optional. They load only after you allow analytics, if configured. Use Analytics preferences to change your choice without losing the core service.

5. Recipients and international processing

Amazon Web Services hosts the web service and processes operational data. A separate isolated rendering worker receives HTML for PDF generation; it has no public network access for fetching page resources. Our email provider receives messages you email us. Stripe would handle checkout only when enabled; Google receives optional analytics only after consent and configuration.

The help form is off, so Presswork sends no form submissions to Formspark today.

Although web infrastructure is in AWS's London region, provider support, subprocessors or account operations may involve transfers outside the UK. Exact destinations and applicable safeguards for the future paid and form flows have not been fully verified; those flows remain disabled. Contact us for transfer information relevant to your data. We may disclose data where law requires it.

6. Retention

• HTML: used for the render request, not stored as a document in the job database. Generated PDFs are accessible only to the owning trial or key and expire within 24 hours; file cleanup runs periodically and retries failures. Playground drafts remain on your device until reset or browser-data deletion.
• Abuse-limiting hashes: active trial address buckets cover the current and previous UTC day and are pruned at startup and during service operation. Help-form rate hashes, if the form opens, expire after one hour in memory.
• Job, quota and internal event metadata: the database does not yet have a verified general deletion schedule. Expiring a PDF does not erase its job record. Infrastructure logs and backups also require a verified schedule.
• Support and payments: mailbox correspondence remains until reviewed or deleted. No paid checkout is active; payment/access-record deletion periods must be set before launch. If Formspark is enabled, it says submissions remain until we delete them, with 30 more days of recovery, and submitter IP data for 12 months.

These gaps are not a promise of indefinite lawful retention. We restrict the preview while deletion rules, transfer arrangements and customer-content agreements are completed. Ask us to review or delete identifiable data where applicable.

7. Security, choices and rights

We use HTTPS, request limits, private result paths, restricted server access and an isolated renderer. No service can guarantee absolute security. You may use synthetic HTML, reset a browser draft and decline optional analytics. HTML is needed to make a PDF; an email address may be needed for a support reply.

Depending on the processing, you may request access, correction, erasure, restriction or portability. You may object to processing based on our legitimate interests. You may withdraw analytics consent without affecting earlier processing. Contact the controller above; we may verify identity. You may complain to the UK Information Commissioner's Office.

We will update this notice when processing changes. See Terms and refunds and Help.