Privacy policy

Effective 18 April 2026 · Last updated 28 August 2026 · Canonical domain framepad.app

This policy describes how the publisher of FramePad (“we”, “us”) handles information when you use https://framepad.app. It is written for humans. If something here is unclear, write to hello@framepad.app.

The short version

Video and images you drop into the studio are not uploaded to FramePad. They are decoded and drawn in your browser. We do record that pages were viewed, using Google Analytics. We do not currently show advertising. If that changes, this policy will change first.

Who is responsible

The data controller for this website is the publisher of FramePad, reachable at hello@framepad.app. Postal contact is available on request at that address. This site is a static web application; it does not operate a media processing backend.

Media files (not collected)

When you drop a file, the browser creates an object URL, decodes the media locally, and draws it to a canvas. Export writes a blob that your browser downloads. Those bytes are not posted to framepad.app or to any third party by this application. Filenames never leave the machine unless you choose to put them in an email. Closing the tab or replacing the file revokes the object URL.

Information we do process

  • Page views and approximate location (Analytics). Google Analytics 4 (measurement ID G-7YJJXZDMJ9) records that a URL on this site was opened, a coarse device category, and a city-level location derived by Google. It does not receive your video or image files.
  • Contact email you send us. If you write to hello@framepad.app, we receive whatever you put in the message. Use that to report overlay drift; do not attach unreleased media unless you intend to.
  • Local drafts. The contact form may store a copy of a report in localStorage under the key framepad-reports so you can recover it if the mail client fails. That copy never leaves your browser unless you send the mail.

Cookies and similar storage

This site uses cookies and local storage in the following ways:

  • Google Analytics may set cookies such as _ga and _ga_* to distinguish sessions. Google’s own policy applies to those cookies. You can block them with your browser or a tracker blocker.
  • framepad-reports in localStorage holds contact drafts you created. Clear site data to delete them.
  • Overlay preferences live in memory for the session and are not persisted.

We do not currently set advertising cookies. If FramePad is accepted into Google AdSense or a similar display network, third-party ad cookies may be used to serve and measure ads. We will update this policy and, where required by law, ask for consent before that happens. Media files will still not be uploaded.

Advertising cookies (Google AdSense)

FramePad may display third-party advertising, including ads served by Google AdSense, once the site is accepted into that programme. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to framepad.app and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings. You may also opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info/choices. Google’s advertising technologies are described at policies.google.com/technologies/ads.

Advertising cookies, if present, measure ad impressions and clicks. They do not receive the video or image files you drop into the studio. Ads will not be placed so that they mimic platform chrome inside the 9:16 canvas.

Legal bases (GDPR / UK GDPR)

Where those laws apply: analytics is processed on the basis of our legitimate interest in understanding whether the guides and tools are used, or on consent where your browser or a consent signal requires it. Email you send us is processed so we can answer you (contract / legitimate interest). You may object to analytics by blocking the script or writing to us.

Retention

Analytics records are retained according to the GA4 retention setting on the property (months, not decades). Email is kept as long as the conversation is active and then as needed for a reasonable archive of bug reports. Local drafts remain until you clear them. Media is not retained because it is never received.

Processors and international transfers

Google LLC provides Analytics and Fonts. Optional H.264 export may load an FFmpeg web assembly core from a public CDN; that request does not include media. Hosting for the static files may be provided by a CDN or static host. Those companies may process data in the United States or other countries. Google’s terms and transfer mechanisms apply to their services.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict personal data, to object to processing, and to lodge a complaint with a supervisory authority. Because we do not hold media or accounts, many requests will amount to “we never received that file.” For analytics identifiers, we will point you to Google’s tools and to blocking the tag. Email hello@framepad.app to exercise a right.

Children

FramePad is a professional creative tool. It is not directed at children under 16. We do not knowingly collect personal information from children.

Diagnostics

The diagnostic collector copies technical facts (user agent, memory, WebGL renderer, Canvas 2D, SharedArrayBuffer, MediaRecorder) to your clipboard at your request. It does not transmit them. If you paste that dump into an email, you choose to send it. Dumps contain no frames and no filenames.

Changes

We will update this page when our practices change. The “last updated” date at the top is the source of truth. Material changes — for example, the introduction of advertising — will be described in plain language here.

Contact

Questions: hello@framepad.app. See also About, Terms, and Contact. This notice applies to the software published at https://framepad.app.