Privacy Policy

• Your photos never leave your device. All image editing happens in your browser. We have no copy of the photo you frame or the image you download.
• We store a privacy-preserving count of how many people use each frame (no personal data).
• If you sign in as a creator, we store your email address and the frames you upload.
• We use analytics and advertising cookies (Google Analytics, Google AdSense) to understand usage and keep the service free.

When you pick a photo in the editor, it is loaded into your browser's memory and drawn onto a canvas. Combining it with a frame, adding text, and producing the final PNG all happen locally on your device. The resulting image is handed to your browser's download or share function. At no point is your photo or the finished image transmitted to our servers or any third party.

The only thing that reaches us is a small anonymous event recording that a frame was used (see below).

We record two kinds of anonymous events:

• Frame views and uses — when a frame page is opened and when someone downloads or shares an image made with it. We store the frame, the event type, an approximate day, the page that referred you, any campaign tags in the link (UTM parameters), your browser's user-agent string, and a one-way hash of your IP address combined with a daily-rotating secret. We do not store your raw IP address. The hash lets us avoid counting the same person twice in a day; it cannot be reversed to identify you.
• Product analytics — we use Google Analytics to understand which pages are visited and how the editor performs.

Signing in is optional and only needed to publish your own frames. We use passwordless email sign-in. When you sign in we store:

• your email address;
• a profile row with a display name and role (user, creator, admin);
• the frames you create — their artwork (a transparent PNG you upload), title, description, category, and the layout you configure.

Authentication and this data are handled by Supabase, our database and auth provider. Sign-in emails are delivered by Resend.

• Essential: if you sign in, a session cookie.
• Analytics & advertising: Google Analytics and Google AdSense load on every visit to measure traffic and show ads. Google may set its own cookies; see Google's advertising policies.
• Local storage: we keep small conveniences (like your in-progress editor state) in your browser. These never reach our servers.

Ads keep InstaFraming free. Google AdSense serves ads and may use cookies to make them more relevant to you.

Some frames are aimed at students (for example a "class of" frame). The editor does not require an account and collects no personal information from the person using it. We do not knowingly collect personal data from children. If you believe a child has provided us personal data through an account, contact us and we will delete it.

• Anonymous usage events: retained in aggregate indefinitely.
• Creator account data and uploaded frames: kept until you delete the frame or ask us to delete your account.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email privacy@instaframing.app and we will respond within a reasonable time. Because your photos are never uploaded, there is nothing for us to return or delete on that front.

We may update this policy. Material changes will be noted by updating the date at the top. Continued use after a change means you accept the updated policy.