Privacy Policy

What we collect

By default, nothing. We do not collect, store, transmit or sell personal information, and there is no analytics or crash-reporting service in the app. The marketing pages of framescrll.com — the home page, help, this policy and the guides — load Google Analytics (measurement id G-DTFRM0EZD6), which records page views and the usual browser and network details Google collects. It runs in consent mode: until you choose "Allow analytics" in the banner, no analytics cookie is set and only cookieless, unidentified pings are sent; "No thanks" keeps it that way, and either choice is remembered in your browser only. It is not loaded by the editor at /app or by the iOS, Android or desktop apps, so nothing about how you use the product is measured. If you choose to create an account (see "Accounts" below), we hold the email address you gave us and a record of what you've purchased — nothing else. Nobody who never creates one appears in our database at all.

Accounts

Mobile needs no account at all: buying the watermark-free unlock through the App Store or Play Store is verified entirely on your device, tied to your store account, not ours. Desktop and the web editor use email sign-in (a link we email you — no password to set or leak) because there's no app store there to verify a purchase for us.

Creating an account is opt-in everywhere, and it does one thing: makes a purchase follow you. Sign in on desktop, or link a phone to that same account by scanning a QR code it shows (no email typed on the phone), and a purchase made on either one now works on both. We verify a linked phone's purchase directly with Apple or Google before it counts — we never take the app's word for it.

What we hold for an account is exactly two things: the email address you signed in with, and which products you've bought. Not your photos, not your projects — those still live only on your device, as described below. Unlinking a device deletes that device's session; deleting your account (available in the app) deletes the account, every linked session and every purchase record permanently.

Sending a project to another device

"Send to another device" is opt-in — nothing is sent anywhere unless you choose this. When you do, the app encrypts your project on your own device before anything leaves it, and uploads only that encrypted, unreadable data to our server. The decryption key is never sent to us: it travels only in the link or QR code you share, in a part of the address that browsers do not transmit to any server. That means our server temporarily holds bytes it cannot read, tied to no account and no identity. Those bytes are deleted automatically after one hour, or the moment the link is opened once, whichever happens first — whether or not anyone ever uses them.

Ordering a printed photo book

Ordering is opt-in and is the one feature that necessarily sends your photos somewhere, because a printer has to receive them. When you place an order, the app assembles the finished book as a print file on your device and uploads that file to our storage, where only our print partner can fetch it through a link that is signed and unlisted. Your shipping address, email and payment are collected by Stripe, our payment processor, on their pages — we never see your card. We pass your name, address and the print file to our print partner so the book can be made and shipped, and we keep a record of the order (what was ordered, the price, the address it went to, the printer's order number) so we can answer questions about it. The print file is deleted automatically two weeks after upload. Nothing about an order is used for anything other than fulfilling it, and no account is required to place one.

Where your photos and projects are kept

Photos you import are read directly by the app and stored, along with your projects, photo books, saved themes and saved colours, in your browser's or device's local storage (IndexedDB). When you hand the web app a folder to make a photo book from, it also keeps a small thumbnail of each photo and the scores it worked out, in that same local storage, so that choosing the same folder again doesn't mean analysing it all over again. That storage belongs to your device. It is not synchronised anywhere and we cannot see it.

Clearing your browser data, or deleting the app, deletes those projects permanently. We hold no copy and cannot restore them.

When the app uses the network

The app works offline for everything that doesn't need another party involved. It makes a network request in these situations:

• The cut-out tool. Removing a photo's background uses a machine-learning model that runs entirely on your device. In the iOS and Android apps the model ships inside the app, so this needs no network at all. In a browser and in the desktop app it is downloaded once from the model provider's CDN. Only the model travels — your photograph is processed locally and is never uploaded.
• Loading the app itself, and the typefaces it uses.
• Google Analytics, on the website's public pages only — never from the editor or the apps.
• Sending a project to another device, described above — always opt-in.
• Ordering a printed photo book, described above — always opt-in: a price quote for your country, the print file, and the order itself.
• Accounts and purchases, only if you choose to sign in or buy the watermark-free unlock: your email (to send a sign-in link and identify your purchase), a purchase receipt for verification with Apple or Google or a payment record with our payment processor (Stripe), and nothing about the photos or projects you're making.

Sharing and exporting

When you share or export, the app hands finished image or PDF files to your device's own share sheet or downloads folder. Whatever you then send them to — Instagram, LinkedIn, Messages, your camera roll — is governed by that app's or service's privacy policy, not this one.

Children

The app is not directed at children and collects no information from anyone, including children.

Your rights

Your photos and projects are on your device and entirely under your control: delete a project in the app, or remove the app, and it is gone — we hold no copy and never did. If you created an account, the same App Store, Play Store or web idea applies: Delete account in the account window removes your email, your purchase records and every linked device's session immediately and permanently. There's nothing further to request — deleting it yourself does the whole thing.

Changes

This policy is updated before a feature that changes what we hold ships, not after, and the change is described here rather than made quietly. Optional accounts (email + purchase record only, to make a purchase follow you across devices) and device-to-device transfer are the two such features so far.

Contact

Questions about this policy: zacharycampione@gmail.com