Privacy Policy

This Privacy Policy explains how Framepad IO handles personal data when you use our website or desktop app.

We use privacy-first defaults: essential data for core functionality and optional analytics only after clear opt-in.

1. Data Controller

Responsible for processing:

Jonah Schueller
Friedrichstr 60, 52070 Aachen, Germany
Email: framepad.67er09@bumpmail.io

2. Data We Process

We process only what is necessary to run the service and improve reliability.

This may include account-related data (if applicable), technical logs, security data, and your settings. Frame/workspace content is primarily stored locally on your device.

Optional product analytics are separate and only enabled after your explicit consent.

3. Legal Basis and Consent

For EEA/UK users, we apply GDPR and ePrivacy principles: essential storage is used for service operation, and optional analytics/storage is opt-in.

Our legal bases may include consent (Art. 6(1)(a) GDPR), contract performance (Art. 6(1)(b) GDPR), and legitimate interests (Art. 6(1)(f) GDPR), depending on the processing purpose.

4. Analytics (PostHog)

If you opt in, we use PostHog (PostHog, Inc.) to measure product usage and website interactions, such as page visits, feature interaction counts, and stability/performance signals.

Analytics are disabled by default and only activated after you choose "Accept all analytics" in the consent banner or settings. You can withdraw consent at any time in settings.

We aim to avoid collecting free-form user content where possible. Some technical identifiers may still be processed to make analytics work (for example pseudonymous session identifiers and internal technical IDs).

5. Service Providers and International Transfers

We use processors such as Netlify (hosting) and PostHog (analytics, if enabled). These providers may process data outside the EEA/UK, including in the United States.

Where required, transfers rely on recognized safeguards (for example Standard Contractual Clauses) and supplementary contractual/technical measures.

6. Retention

We retain personal data only as long as necessary for the stated purposes, legal obligations, dispute handling, and security.

Locally stored app content remains on your device until you remove it. Consent preferences are stored so we can remember your choice.

7. Your Rights

Depending on your location, you may have rights including access, correction, deletion, restriction, objection, and data portability. You may also withdraw consent at any time.

If you are in the EEA/UK, you can lodge a complaint with your data protection authority.

8. Changes to This Policy

We may update this policy to reflect legal, technical, or product changes. The latest version and date are published on this page.