Does OciDeck send my presentation to an external privacy monitoring service?

Whether privacy control is local or remote.

No, not for the normal processing of your presentation. OciDeck web runs in your browser: the Flutter web app is loaded from the server and then editing, live preview, OciWacht, export to PDF/PPTX/HTML and the CVSS builder happen client-side. Deck content is not sent to a backend for processing.

There is also no telemetry or analytics built in. The OciDeck hosting server therefore gets no application-level insight into your deck, edits, privacy findings or exports.

There are nuances. Like every webhost, the server may have ordinary access logs, such as IP address, time, requested files and user-agent. That shows that someone loaded the app, but not what that person does in OciDeck.

There is also an optional fetch proxy for URL import when a source does not allow CORS access. Only when you open such a non-CORS URL through that proxy does the server see the URL you entered and relay the bytes.

Other outgoing connections are user-initiated and go to destinations you choose or configure yourself, such as optional AI assistance, WebDAV/Nextcloud, a CVE database, secmodule provisioning or a URL you import yourself.

If you want to use OciDeck in the browser, go to ocideck.nl.

Read more at Privacy features in OciDeck.