Privacy policy
Last updated 2026-10-20
Who runs this site?
LinkedIn Carousel Maker is run by its maker as an independent product. Questions about your data go to [email protected].
What is stored if I use it without an account?
Your draft carousel is saved in your own browser's localStorage, not on our server. Clearing your browser data removes it.
What is stored if I create an account?
- Your name, email address and sign-in details. You can sign in with an email and password or with Google; sign-in is handled by better-auth and keeps you logged in with a session cookie.
- Passkeys you add in Settings. We store each passkey's public key, credential id and the name you give it; the private key never leaves your device.
- Your carousels, folders and creator profile (name, handle, title and avatar), saved in our Postgres database against your account.
- Your monthly AI usage counts (generations and edits) and daily API request counts.
- Images you upload. They are converted to WebP and stored on the server's disk or in S3-compatible object storage, depending on how the site is deployed.
- Your API key, stored only as a SHA-256 hash. We show the key once when you create it and cannot show it again.
- Files made by the server-side export (REST API and MCP). They are kept until deleted; there is no automatic cleanup yet.
Who else processes my data?
- Anthropic. When you use the AI, what you give it (a topic, your text, the text of a link you add, or the slides you ask it to edit) is sent to Anthropic's API to write the result. Under Anthropic's commercial terms, API inputs and outputs are not used to train Anthropic's models.
- Pexels. When you search stock photos, your search words are sent to Pexels.
- Emailit. Account emails (the link to verify your email address and password reset links) are sent through Emailit, which receives your email address and the message.
- Google. If you choose “Continue with Google”, Google confirms who you are and shares your name, email address and profile picture with us.
- PostHog. Product analytics run only when the site is configured with a PostHog key. When they run, they record page views and product events such as sign-ups, and PostHog keeps an identifier in a cookie and localStorage in your browser.
Do you log my IP address?
Some endpoints are rate limited per IP address; for that we keep only a SHA-256 hash of the address with a request count for the current time window. When you sign in, your session stores your IP address and browser user agent until you sign out or the session expires.
How do I delete my data?
Go to Settings and choose Delete account. That deletes your account and every database row tied to it: carousels, folders, profile, API keys, usage counts and the records of your uploads. Two honest caveats: uploaded image files and server-side export files are not yet removed from storage when you delete your account, and a draft in your browser stays until you clear it. Email [email protected] and we will remove those files by hand.
Will this policy change?
If what we store or who processes it changes, we will update this page and its date. The terms of use cover how you may use the service.