Privacy Policy
1. Who is responsible
The controller of your data is Alberto del Álamo Herrero, with Spanish tax ID (NIF) 49022742J, with address at calle Venezuela, Valdemoro (Madrid, Spain), who operates PreFrame ("we") — see the Legal Notice. You can reach us at the address in section 10.
2. What data is processed
- Account data. When you sign in with Google or Apple we receive your email address, your name and, with Google, your avatar. We never receive or store a password.
- Your projects. The shots, sections, notes and equipment you create are stored in your account so you can open them on your computer. The files you work with stay on your machine and are never uploaded. Only a reduced thumbnail of the images you assign to your shots and projects is stored in your account, so you can see them when you open it (section 5).
- Usage data. Product events such as "project created" or "export completed", tied to your account id, used to understand how the application is used. They never include the content of your projects.
- Error reports. See section 4.
- Payment data. Payments are processed by Stripe as merchant of record. PreFrame never sees your card number; we only receive confirmation that a purchase was completed and which credits to deliver, and keep a record of your purchases so you can see them in the application.
PreFrame is not intended for anyone under 16, and we do not knowingly process data from people under that age: creating an account requires confirming that you are 16 or older. If you know of an account that belongs to someone under 16, write to us (section 10) and we will delete it.
3. Why, and on what legal basis
- Providing the service — account, projects, credits and purchases: necessary to perform the contract with you (Art. 6(1)(b) GDPR).
- Understanding how the application is used and fixing what breaks — usage events and error reports: our legitimate interest in improving PreFrame (Art. 6(1)(f) GDPR). You can object at any time (section 9).
- Legal obligations — tax and accounting records of purchases, kept by Stripe and by us as the law requires (Art. 6(1)(c) GDPR).
We do not sell your data and do not use it for advertising.
4. Error reports
When something breaks inside the application, PreFrame can send us a technical report so we can find out and fix it. The report contains the error message, a sanitised stack trace, the PreFrame version, your operating system and your account id. It never contains the content of your projects, nor the names or paths of your files.
We process these reports on the basis of our legitimate interest in keeping the application working (Art. 6(1)(f) GDPR). They are deleted automatically after 90 days. Sending them is on by default and you can turn it off at any time in Settings → Error reports; from that moment nothing is sent.
5. Where your data lives
- Your computer. Your projects are cached locally, and the files you work with (audio and reference images) exist only on your machine. PreFrame never uploads them.
- Supabase (Supabase, Inc.), which hosts our database and authentication in the European Union (AWS, eu-west-1, Ireland). Account data, projects, usage events and error reports are stored there, as well as the thumbnails of the images you assign to your shots and projects, in a private space that only your account can access.
- Stripe (Stripe Payments Europe, Ltd.), which processes payments as merchant of record under its own privacy policy.
- Google and Apple, only as sign-in providers: when you sign in they tell us who you are; we do not share anything with them.
- Services the application contacts when you use them. If you search for a place for a shot, the text you type is sent to Photon, komoot's place search built on OpenStreetMap, to return results. If you add a YouTube (Google) or Vimeo video to a project, the video and its thumbnail load directly from that service. And if you sign in with Google, your avatar loads from Google's servers. In each case your computer connects to that service, which receives your IP address and is governed by its own privacy policy; we send it no other data about you.
Some of these providers are US companies or have their parent company there (Supabase, Stripe, GitHub, Cloudflare, Google, Apple and Vimeo), so part of your data may be processed outside the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework, to which they adhere, or on the European Commission's standard contractual clauses included in their contracts.
6. This website
The PreFrame website (preframe-app.com) is hosted on GitHub Pages, a service of GitHub, Inc. (United States). Like any web server, GitHub keeps technical logs of the requests it receives, including the visitor's IP address, in order to deliver and secure the service. That processing is GitHub's own and is governed by their privacy policy.
This site uses no cookies and no browser storage, which is why you are never asked to accept anything. Every font is served from this same domain: no requests are made to Google Fonts or to advertising networks. The only requests leaving the page are those of the cookieless analytics described in section 7.
7. Website analytics
This site uses first-party analytics, hosted on our own infrastructure (Cloudflare and Supabase), to learn in aggregate how many people visit and whether the site works: page views together with the referring site or campaign, the country, the language, the device type and operating system, the reading time of each page, how far down each page you scrolled and which section you reached, whether a download button came into view, clicks on the download buttons, when someone sends the link from their phone to their computer (only that it happened, never to whom or by what means) and, on the shot list maker, that the tool was used, that a PDF was exported and which option you tapped when we ask what you missed (only that it happened and the option, never what you wrote: your list never leaves your browser).
The measurement is cookieless: it stores nothing in your browser and uses no persistent identifier. Visitors are counted through a technical code derived from your IP address and browser, combined with a secret key and the current date; your IP address is used only for an instant to derive that code and is never stored, and the code for the same visitor is different every day, so you cannot be followed across days or across websites. The data is only used in aggregate and is deleted after 90 days.
As a complement, the site uses Cloudflare Web Analytics (Cloudflare, Inc.) under the same guarantees: no cookies, no persistent identifiers, no fingerprinting and no profiling. That is why this site still asks you to accept nothing.
The legal basis is our legitimate interest in knowing whether the site works and reaches the people it is meant for (Art. 6(1)(f) GDPR).
8. Retention and deletion
- Account and projects: kept for as long as your account exists. When you ask us to delete your account, the account, your projects and your purchase records are deleted from our systems, except the data Stripe must keep under its own legal obligations as merchant of record.
- Error reports: deleted automatically after 90 days (section 4).
- Usage events: deleted automatically after 90 days.
- Local data on your computer: the "Delete all local data on this computer" button in Settings removes everything PreFrame stores on that machine. It does not delete your account or the projects stored in your account.
9. Your rights
Under the GDPR you can ask us to access the data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive a copy of it in a portable format. You can object to the processing of error reports at any time simply by turning them off in Settings; you can object to usage analytics by writing to us.
To exercise any of these rights, including deleting your account, write to the address in section 10. We answer within one month. If you think we have not handled your data correctly, you can also complain to the Spanish Data Protection Agency (aepd.es).
10. Contact
Write to us at legal@preframe-app.com.