Skip to content

Privacy policy

Last updated: October 17, 2026

Company New Rent s.r.o., Belaníkova 6, Bratislava, Slovakia ("we", "us", "our") develops the SlideShow application, operates the website https://slideshow.digital and provides the SlideShow Cloud Management platform.

This document describes how we handle personal data in connection with:

  • the SlideShow application for Android and Windows ("app"),
  • the website https://slideshow.digital ("website"),
  • SlideShow Cloud Management, either as a managed service (SaaS) or as a solution deployed separately for a customer ("Cloud Management").

As we continue to add new features, this policy may change. The date of the last update is shown at the top of this page. Please review it regularly.

SlideShow application

When used standalone (without Cloud Management), SlideShow stores all the information on the device and doesn't share it except in the cases explained below. Security procedures are in place to protect the confidentiality of your data. Sensitive data, such as tokens and passwords, are stored hashed, encrypted, and/or in a private folder accessible only to SlideShow. The owner of the device is responsible for keeping the device secure.

Information from Google Drive or Dropbox external service

If you decide to connect the SlideShow application with your Google Drive or Dropbox account, SlideShow will collect your email address during the setup process and will have read-only access to all files in your Google Drive or Dropbox account until you revoke the access either from the SlideShow application or from Google Drive / Dropbox settings. By connecting SlideShow with your Google Drive or Dropbox account, you are giving SlideShow permission to download files from the chosen Google Drive or Dropbox folder into your device and display them on the screen as set up via playlists. SlideShow won't (and can't) modify files on your Google Drive or Dropbox in any way.

The data mentioned above, as well as the secure tokens necessary for accessing the Google Drive or Dropbox account, are stored only on the device where the SlideShow application is installed. All secure tokens are stored securely in a private folder on the device accessible only to SlideShow. SlideShow doesn't share the data with anybody except Google LLC (provider of the Google Drive API) / Dropbox Inc. (provider of the Dropbox API).

The secure tokens necessary for accessing the Google Drive or Dropbox account are stored only while the account is active in SlideShow. Deletion of these tokens can be performed by logging out from the Google Drive / Dropbox account through SlideShow's web interface, in the same menu option as the log in was performed initially. The tokens are deleted immediately after logging out. Media files already synchronized from Google Drive / Dropbox are not deleted automatically upon logging out, they can be deleted manually in the same way as other media files in SlideShow.

Information from other synchronization servers

If you configure file synchronization from an HTTP, FTP, SFTP or WebDAV server, the server address and credentials you enter are stored only on the device, in the private folder accessible only to SlideShow. They are used solely to download files from that server and are deleted when you remove the configuration or uninstall the app.

Information shared with developers

If you decide to fill and send a bug report in the SlideShow application (either via the web interface or via the on-screen menu), you are giving SlideShow permission to send the following data to the developers of the application: your email and message, information about the device, information about software version, screenshot of the current screen, settings of the application, configuration of the application, log file, logcat messages from Android, list of currently running application threads. These data will be used only for diagnosing, replicating and resolving the problem and contacting the author of the bug report. The data won't be shared with any third party. Bug reports are deleted once they are no longer needed for resolving the problem, at the latest within 2 years.

SlideShow may occasionally send the following anonymous data to developers of the application: application version, operating system version, whether the device is rooted. This data will be used only for statistical purposes during the development of new features and cannot be used to identify you or your device.

Information shared with third-party file editors

By using the Edit functionality in File manager, you are giving SlideShow permission to share the particular file with the external service used for editing the file. Please review the privacy policy of the selected external service for more information concerning processing and storing your file. No other information except the particular file is shared with the external service.

SlideShow Cloud Management

SlideShow Cloud Management is a platform for remote management of multiple SlideShow players. It is offered to businesses (typically digital signage providers and their clients) under a separate agreement. Who is responsible for your data depends on the deployment model.

Managed service (SaaS)

When Cloud Management is provided as a managed service by us:

  • The customer (the organization that ordered Cloud Management) is the controller of personal data contained in its account, players, media and notes. If you are a user invited by a customer, please contact that customer with questions about your data.
  • We act as a processor on behalf of the customer and process the data only according to the customer's instructions, for the purpose of providing the service. A Data Processing Agreement under Art. 28 GDPR is available to customers on request.
  • We act as a controller for data needed to manage our business relationship with the customer (contact persons, billing, communication) and for security logs of the platform.

Customer-hosted deployment

When Cloud Management is installed on a server provided by the customer (on-premises or with the customer's preferred cloud provider), the customer operates the platform and is the controller of all data stored in it. We don't have access to this data, except when the customer grants us access for installation, updates or support. In that case we act as a processor and access the data only to the extent necessary to perform the requested work.

If the deployment is branded by a customer (e.g., running on cloud.customer-domain.com), the privacy policy of that customer applies to its users in addition to this policy.

What data Cloud Management processes

  • User accounts: name, email address, assigned role, permissions and clients, login history. User authentication is handled by a Keycloak server that is part of the platform. Passwords are stored only in hashed form and are never visible to us or to administrators.
  • Players: device identifiers (such as the MAC address used for automatic provisioning), device model, operating system and app version, IP address, online status, configuration, and logs needed for remote management.
  • Display statistics: information about which media was displayed on which player and when (proof-of-play), used for monitoring, analytics and reports.
  • Content: media files, web pages, playlists, layouts, schedules and notes uploaded by users. Customers are responsible for ensuring they have the right to use any personal data contained in their content (e.g., people in images or videos, names in notes).
  • Technical logs: web server and security logs (IP address, time and type of request) used to keep the platform secure and reliable.

Communication between players, users' browsers and the Cloud Management platform is encrypted. Access to data is restricted by role-based permissions and client-based access control, so users only see the players and content of the clients they are assigned to.

On the managed service, we process data to provide the service the customer ordered (performance of a contract, Art. 6(1)(b) GDPR), to keep the platform secure and prevent misuse (legitimate interest, Art. 6(1)(f) GDPR) and to meet our legal obligations, such as accounting (Art. 6(1)(c) GDPR). Data processed on behalf of customers is used only according to their instructions. We don't sell personal data and we don't use customer content for advertising or for training any models.

Retention and deletion

Data in Cloud Management is kept for the duration of the agreement with the customer. Customers and administrators can delete users, players, media and notes at any time. After the agreement ends, customer data is deleted from the managed service within 90 days, unless the customer requests an export or a different period is agreed in the contract. Backups are overwritten in their regular cycle. Billing records are kept for the period required by law.

Sub-processors

To provide the managed service, we use carefully selected infrastructure providers (hosting and email delivery for notifications and password recovery). A current list of sub-processors and their locations is available to customers on request. If data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the Standard Contractual Clauses of the European Commission.

Website

The website https://slideshow.digital uses Google Analytics to collect anonymous statistics about visits (e.g., pages visited, approximate location, browser type). This helps us understand which parts of the documentation are useful. You can block these statistics with your browser settings or a browser extension. If you contact us by email, we use your email address and message only to respond to you.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access your personal data, to request its correction or deletion, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time.

For data in Cloud Management managed by a customer, please contact that customer first. We will assist them in handling your request.

You can also lodge a complaint with the supervisory authority, which in Slovakia is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, https://dataprotection.gov.sk).

Children

SlideShow and Cloud Management are not directed at children under 16, and we don't knowingly collect their personal data.

Contact

For any questions about this privacy policy or your personal data, contact us at info@slideshow.digital.