SlateVM Privacy Policy

Effective date: September 1, 2026
Last updated: October 24, 2026

This Privacy Policy explains how Elysian Edge LLC, a Nevada limited liability company operating SlateVM (“Elysian Edge,” “SlateVM,” “we,” “us,” or “our”), handles information when you visit slatevm.com, download or use the SlateVM application, sign in to an available SlateVM account service, communicate with us, or connect SlateVM to a compatible Model Context Protocol (“MCP”) client. It also explains the choices and rights available to you.

1. Privacy at a glance

  • Your virtual machines are local. VM bundles, virtual disks, configuration, installation media references, console state, guest files, SSH keys, and diagnostics are stored or processed on systems you control unless you deliberately move, upload, or share them.
  • The SlateVM app has no tracking. The application contains no analytics, telemetry, advertising, or usage tracking. It contacts us only to check for and download updates and to validate your license, as described below.
  • The website measures its advertising. The SlateVM website does not create accounts or website sessions, but it uses the Google tag to measure whether our Google Ads lead to visits and downloads. The tag sets cookies and sends data to Google, as described under “Advertising measurement” below. Browsers that send a Global Privacy Control signal do not load it.
  • Sign-in is provider based. If account services are enabled and you choose Apple, Google, Microsoft, or Amazon, that provider authenticates you. SlateVM never receives your provider password.
  • MCP control is local. The bundled adapter communicates with SlateVM over a local inter-process channel on your computer that is not exposed to the network. Your chosen LLM client may independently transmit prompts, tool inputs, images, or results under that provider's terms and privacy policy.

2. Information covered by this policy

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to a person or household. It does not include information that has been lawfully made public or information that has been deidentified or aggregated so it cannot reasonably identify you.

3. Information we collect

Information you provide

  • Account and profile information. When account services are available and you sign in, we may receive the information authorized through your chosen identity provider, such as name, email address, provider-specific identifier, and optional profile image.
  • Communications. If you contact us, we receive the content of your message, your contact details, and any files or diagnostic information you choose to include.
  • Transaction information. If paid plans or purchases are offered, a payment processor may process payment details. SlateVM receives transaction status and ordinary commercial records, not full card credentials.

Information processed automatically

  • Website request data. Our hosting and security infrastructure may process an IP address, request time, requested URL, response status, referrer, user agent, and similar network metadata needed to deliver the site, prevent abuse, diagnose availability, and maintain security.
  • Aggregate website statistics. Short-lived server access logs are used to estimate daily visitors and page views. Raw logs rotate after seven days. Visitor identifiers are salted, date-scoped hashes used only during aggregation and cannot be linked across days; the retained report contains counts and public routes, not IP addresses or user agents.
  • Theme preference. The website stores the key slatevm.theme in your browser's local storage so it can remember light or dark appearance. This value remains in your browser until you clear it or change the setting.
  • Advertising measurement (Google tag). The website loads Google's tag (gtag.js) for Google Ads. It sets cookies in your browser and sends Google information such as your IP address, browser and device details, the pages you visit on this site, the Google ad click that brought you here, and whether you clicked a download link, so that Google Ads can report which ads lead to downloads. Google processes this under its own privacy policy. You can limit it through Google's ad settings, by blocking third-party cookies or scripts in your browser, or by enabling Global Privacy Control, in which case the tag is not loaded.
  • Download request data. When you download SlateVM, the website and content-delivery infrastructure process the network request needed to deliver the installer. Download links pass through slatevm.com/dl/ so our server logs can count downloads. The public release manifest itself contains product version, filename, size, URL, and integrity information, not personal information.

Information the application keeps locally

SlateVM processes VM names and identifiers, resource settings, disk images, selected installer paths and security-scoped bookmarks, network and display settings, shared-folder references, installation state, logs, screenshots requested through MCP, OCR output, guest addresses, and per-VM SSH credentials on your computer. These data support the VM lifecycle and are not sent to SlateVM merely because you use the application.

Guest operating systems and applications inside a VM may collect or transmit information independently. They are separate products governed by their providers' terms and privacy practices.

Update checks. SlateVM periodically downloads a signed release manifest from our content delivery network to see whether a newer version is available, and downloads the update package when you or your settings allow. These requests include standard network information (such as IP address, user agent, and the requested file) that our hosting and delivery providers may log; they do not include your VMs or their contents.

Licensing and purchases. When you start a trial, activate, check, or release a license, SlateVM sends the license key, a device identifier generated for licensing, the app version, and the host platform to us and to our payment and licensing provider so that we can validate the license and enforce device limits. Purchases, billing, and taxes are processed by our payment provider under its own privacy policy; we receive order details such as your name, email address, country, and plan, but not your full payment card number.

4. How we use information

We use information only as reasonably necessary to:

  • provide, operate, download, authenticate, maintain, and improve SlateVM;
  • create and manage an account when account services are enabled;
  • respond to questions, support requests, legal requests, and product feedback;
  • protect the website, application, users, and public from fraud, abuse, and security incidents;
  • monitor service availability, debug failures, and preserve operational integrity;
  • administer purchases, licenses, and records when commercial services are offered;
  • comply with law and enforce our agreements; and
  • send service or product communications you request, with an opportunity to opt out of nonessential marketing.

5. Legal bases for processing

Where law requires a legal basis, we process information as necessary to perform a contract with you, take steps you request before entering a contract, pursue legitimate interests such as providing and securing the service, comply with legal obligations, protect vital interests, or act with your consent. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

6. When information is disclosed

We may disclose the limited information described above:

  • To service providers. Hosting, content delivery, identity, payment, email, customer-support, and security providers may process information for us under contractual restrictions.
  • To Google for advertising measurement. The website's Google tag sends Google the browsing and ad-click information described above.
  • At your direction. Information is provided to an identity provider, LLM/MCP client, guest service, or other integration when you choose that workflow.
  • For legal and safety reasons. We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate abuse, or enforce agreements.
  • In a business transaction. Information may transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and continued protection.

SlateVM does not sell personal information. The SlateVM application shares nothing for advertising. The website's Google tag may be considered “sharing” for cross-context behavioral advertising under some US state laws; you can opt out with Global Privacy Control or the other controls described under “Advertising measurement.”

7. Identity providers and linked services

If you select “Continue with Apple,” “Continue with Google,” “Continue with Microsoft,” or “Continue with Amazon,” your browser is redirected to the selected provider or our configured authentication service. The provider decides what information to request and shows you what will be shared. Its processing is governed by its own privacy policy. Links, operating-system downloads, guest software, CDNs, and LLM clients are also independent services; review their policies before sending information to them.

8. MCP, LLM clients, and automation

The bundled slatevm-mcp process translates structured MCP calls into the app's local control protocol. The app owns VM state and the adapter does not operate a remote SlateVM control service. Tool calls can expose VM configuration, diagnostics, logs, console captures, OCR text, guest addresses, command output, and other information to the MCP client you connected. If that client uses a cloud-hosted model, its provider may receive and retain those data. Choose a client and settings appropriate for your information, review commands before authorizing consequential work, and avoid placing secrets into prompts or console captures unless the selected service is authorized to receive them.

9. Retention

Local VM data remains on your computer until you change or delete it. Deleting a VM through SlateVM moves its bundle to your system's trash or removes it, as the host operating system provides; the host operating system controls final deletion. Browser theme preference remains until cleared. We retain account, support, transaction, and operational records only for as long as reasonably necessary for the purposes described here, including providing the service, resolving disputes, security, fraud prevention, accounting, and legal compliance. Retention periods vary by record type; when information is no longer required, we delete, deidentify, or securely isolate it.

10. Security

SlateVM uses administrative, technical, and organizational measures designed to protect information. SlateVM uses the security features of each host operating system, such as code signing and hardened runtime where available; privileged components are separated from the app; each VM's process accepts commands only from SlateVM; release manifests are signed and verified before updates install; and the MCP control endpoint is local to the user account. Website traffic uses HTTPS. No system is perfectly secure, so you remain responsible for securing your host computer, guest operating systems, identity-provider account, LLM client, backups, and credentials you use with SlateVM.

11. Your choices and privacy rights

Depending on where you live, you may have rights to request access to personal information, obtain a portable copy, correct inaccurate information, delete information, restrict or object to processing, withdraw consent, and appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

To make a request, email privacy@slatevm.com with “Privacy Request” in the subject. Describe the request and the SlateVM account or email concerned. We may verify your identity and authority before acting. An authorized agent may submit a request where law permits, subject to verification. We will respond within the period required by applicable law.

You can clear the website's theme preference using browser controls. You can revoke SlateVM's identity-provider access through that provider, and you can remove local VM data, logs, screenshots, and SSH keys using SlateVM and your operating system's controls.

12. United States privacy rights

Residents of states with applicable consumer-privacy laws may request to know, access, correct, delete, or obtain a portable copy of covered personal information and may have rights to opt out of certain targeted advertising, sale, profiling, or other regulated processing, subject to statutory exceptions. SlateVM does not sell personal information, share it for cross-context behavioral advertising, or use personal information for targeted advertising. We do not knowingly sell or share personal information of consumers under 16. We honor applicable browser-based privacy signals where required and will not discriminate against you for exercising a privacy right.

13. International users

SlateVM is operated by Elysian Edge LLC from Nevada, United States. Service providers may process information in the United States and other countries whose laws differ from those where you live. Where required, we use recognized safeguards for international transfers. Residents of the European Economic Area, United Kingdom, or Switzerland may exercise the rights described above and may lodge a complaint with their local data-protection authority.

14. Children

SlateVM is a technical virtualization product and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child provided personal information, contact us so we can investigate and delete it as appropriate. Users below the age of legal majority should use SlateVM only with permission and supervision of a parent or legal guardian.

15. Changes to this policy

We may update this policy as SlateVM, its services, or applicable requirements change. We will post the revised policy here and update the effective or last-updated date. If a change materially affects how we use information already collected, we will provide additional notice or obtain consent when required.

16. Contact

Elysian Edge LLC is the operator of SlateVM and is located in the State of Nevada, United States. Questions, privacy requests, or complaints may be sent to privacy@slatevm.com. General product and support inquiries may be sent to support@slatevm.com.