Privacy Policy

Who we are

MedSlice (medslice.app) is a browser-based DICOM viewing and export tool. References to "we", "us" or "MedSlice" in this policy refer to the operator of medslice.app.

Your DICOM files

We never see, receive or store your medical images. All DICOM processing — parsing, rendering, converting, anonymizing — runs entirely inside your browser using WebAssembly and JavaScript. Files are read from your local disk into browser memory and are never transmitted to any server.

This architecture is not a policy choice — it is a technical constraint. There is no server endpoint that could receive your files.

What data we do collect

• Anonymous usage events. When you open the viewer, export a file, or hit the export limit, we record a counter (event type + calendar date). No IP address, no file metadata, no personal identifiers are stored. These counters are used solely to understand aggregate product usage.
• Export rate-limiting. To enforce the free-tier daily limit we store a temporary counter keyed to a one-way hash (SHA-256) of your IP address plus the current UTC date. The raw IP is never stored. The counter expires automatically after 25 hours.
• Pro subscription token. If you subscribe to Pro, a session token is stored in your browser's localStorage. This token is validated against our server (Cloudflare KV) on each export to confirm your subscription is active. It contains no personal data.
• Payment data. Payments are handled entirely by Stripe. We receive only a Stripe customer ID and subscription status. We do not store card numbers or billing addresses. See Stripe's Privacy Policy.

Cookies and local storage

We do not set any tracking cookies. The only browser storage we write is:

• medslice_pro_token — your Pro session token, stored in localStorage. You can delete it at any time via your browser's developer tools or by clearing site data.

Third-party services

• Cloudflare — DNS, CDN and edge computing. Cloudflare processes request metadata (including IP addresses) as part of routing and DDoS protection. See Cloudflare's Privacy Policy.
• Stripe — payment processing for Pro subscriptions. See Stripe's Privacy Policy.
• Google Fonts — fonts are loaded from Google's CDN. See Google's Privacy Policy.

GDPR

Because we process minimal personal data (IP hash for rate-limiting, Stripe customer ID for subscriptions), our legal basis is legitimate interest for rate-limiting and contract performance for subscription management.

If you are in the EU/EEA you have the right to access, rectify, erase or port any personal data we hold. Since we store only a hashed IP (not reversible to an individual) and a Stripe customer record, a practical erasure request means cancelling your subscription and clearing your browser's localStorage. Contact us if you need assistance.

Data retention

• Rate-limit counters: 25 hours.
• Pro tokens: until subscription expires or is cancelled.
• Stripe customer records: as required by Stripe and applicable tax law (typically 7 years).
• Anonymous usage counters: indefinitely (they contain no personal data).

Children

MedSlice is not directed at children under 16. We do not knowingly collect data from minors.

Contact

Privacy questions: privacy@medslice.app