Privacy Policy
1. Who is responsible
The controller of your data is Alberto del Álamo Herrero, with Spanish tax ID (NIF) 49022742J, with address at Valdemoro, Madrid, who operates PreFrame ("we") — see the Legal Notice. You can reach us at the address in section 10.
2. What data is processed
- Account data. When you sign in with Google or Apple we receive your email address, your name and, with Google, your avatar. We never receive or store a password.
- Your projects. The shots, sections, notes and equipment you create are stored in your account so you can open them on your computer. The audio and image files you work with stay on your machine and are never uploaded (section 5).
- Usage data. Product events such as "project created" or "export completed", tied to your account id, used to understand how the application is used. They never include the content of your projects.
- Error reports. See section 4.
- Payment data. Payments are processed by Stripe as merchant of record. PreFrame never sees your card number; we only receive confirmation that a purchase was completed and which credits to deliver, and keep a record of your purchases so you can see them in the application.
3. Why, and on what legal basis
- Providing the service — account, projects, credits and purchases: necessary to perform the contract with you (Art. 6(1)(b) GDPR).
- Understanding how the application is used and fixing what breaks — usage events and error reports: our legitimate interest in improving PreFrame (Art. 6(1)(f) GDPR). You can object at any time (section 9).
- Legal obligations — tax and accounting records of purchases, kept by Stripe and by us as the law requires (Art. 6(1)(c) GDPR).
We do not sell your data and do not use it for advertising.
4. Error reports
When something breaks inside the application, PreFrame can send us a technical report so we can find out and fix it. The report contains the error message, a sanitised stack trace, the PreFrame version, your operating system and your account id. It never contains the content of your projects, nor the names or paths of your files.
We process these reports on the basis of our legitimate interest in keeping the application working (Art. 6(1)(f) GDPR). They are deleted automatically after 90 days. Sending them is on by default and you can turn it off at any time in Settings → Error reports; from that moment nothing is sent.
5. Where your data lives
- Your computer. Your projects are cached locally, and the files you work with (audio and reference images) exist only on your machine. PreFrame never uploads them.
- Supabase (Supabase, Inc.), which hosts our database and authentication in the European Union (AWS, eu-west-1, Ireland). Account data, projects, usage events and error reports are stored there.
- Stripe (Stripe Payments Europe, Ltd.), which processes payments as merchant of record under its own privacy policy.
- Google and Apple, only as sign-in providers: when you sign in they tell us who you are; we do not share anything with them.
6. This website
The PreFrame website (preframe-app.com) is hosted on GitHub Pages, a service of GitHub, Inc. (United States). Like any web server, GitHub keeps technical logs of the requests it receives, including the visitor's IP address, in order to deliver and secure the service. That processing is GitHub's own and is governed by their privacy policy.
This site uses no cookies and no browser storage, which is why you are never asked to accept anything. Every font is served from this same domain: no requests are made to Google Fonts or to advertising networks. The only requests leaving the page are those of the cookieless analytics described in section 7.
7. Website analytics
This site uses first-party analytics, hosted on our own infrastructure (Cloudflare and Supabase), to learn in aggregate how many people visit and whether the site works: page views together with the referring site or campaign, the country, the language, the device type and operating system, the reading time of each page, and clicks on the download buttons.
The measurement is cookieless: it stores nothing in your browser and uses no persistent identifier. Visitors are counted through a technical code derived from a key that rotates every 24 hours; your IP address is used only for an instant to derive that code and is never stored, and the code for the same visitor is different every day, so you cannot be followed across days or across websites. The data, always aggregated and anonymous, is deleted after 90 days.
As a complement, the site uses Cloudflare Web Analytics (Cloudflare, Inc.) under the same guarantees: no cookies, no persistent identifiers, no fingerprinting and no profiling. That is why this site still asks you to accept nothing.
The legal basis is our legitimate interest in knowing whether the site works and reaches the people it is meant for (Art. 6(1)(f) GDPR).
8. Retention and deletion
- Account and projects: kept for as long as your account exists. When you ask us to delete your account, the account, your projects and your purchase records are deleted from our systems, except the data Stripe must keep under its own legal obligations as merchant of record.
- Error reports: deleted automatically after 90 days (section 4).
- Usage events: deleted automatically after 90 days.
- Local data on your computer: the "Delete all local data on this computer" button in Settings removes everything PreFrame stores on that machine. It does not delete your account or the projects stored in your account.
9. Your rights
Under the GDPR you can ask us to access the data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive a copy of it in a portable format. You can object to the processing of error reports at any time simply by turning them off in Settings; you can object to usage analytics by writing to us.
To exercise any of these rights, including deleting your account, write to the address in section 10. We answer within one month. If you think we have not handled your data correctly, you can also complain to the Spanish Data Protection Agency (aepd.es).
10. Contact
Write to us at legal@preframe-app.com.