Privacy Policy

In short

App Frame (appframe.me) is a browser-based studio for making App Store and Google Play screenshots. You can use Screenshot Store without an account. This page explains what we store when you sign in, why, and who helps us run it.

Data we store when you sign in

If you sign in with Google or with an email link, we store:

• Your name, email address and profile photo (only if you sign in with Google).
• Session data: a session token, your IP address and the browser/device type when the session was created, so you stay signed in and we can protect your account.
• We never receive a password: sign-in uses Google or a one-time link sent to your email.

Data we do not store

The screenshots, projects, recordings and audio you work with are processed in your browser and kept in your device's browser storage (IndexedDB and localStorage). They are not uploaded to our servers. As a result, projects do not move to another device on their own, and clearing the site's data in your browser deletes them.

We do not use advertising trackers and we do not sell personal data.

What we use the data for

Account data is used to recognise you when you sign in, to send sign-in links, to prevent abuse and, if you are invited to a test group, to give you access to features that are not yet open to everyone.

Who helps us

We use the providers below to run the service. They process data only as needed for their function:

• Hetzner (Finland): the servers and database where account data is stored, and the daily backups.
• Cloudflare: DNS and a web traffic proxy (CDN and security), so requests to the site pass through its network.
• Google: the Sign in with Google service, only if you choose it.
• Resend: delivery of sign-in link emails.

Fonts from Google

The fonts used on every page are served from our own servers. Only when you open the font picker in the Store editor and use an extra font outside the built-in list does your browser download that font file from Google Fonts, so Google sees your IP address at that moment. Your project text is not sent.

Cookies and local storage

We use one cookie for the signed-in session (httpOnly, valid for 30 days, removed when you sign out). A second cookie, “appframe-locale”, remembers the language you chose (English or Indonesian); it holds only that choice, lasts one year and is shared between appframe.me and its subdomains so the site and the studio agree. We do not use advertising or tracking cookies. Your browser's local storage holds your projects and display preferences.

How long we keep data

Account data is kept while your account exists. Sessions expire automatically after 30 days. Database backups are kept for about 14 days, so data you delete may remain in backups until that period passes.

Your rights

You can ask for a copy of your account data, ask for corrections, or ask for your account and its data to be deleted. We process requests within 30 days; the easiest way is to email us from your account address. Questions or requests about your data and account: [email protected].

Children

This service is not meant for children under 13 and we do not knowingly collect their data. If you think a child has an account, tell us so it can be deleted.

Security

Traffic uses HTTPS, the database is not exposed to the internet, server access uses keys, and backups are made daily. No system is completely secure; if a breach affects you, we will tell you by email.

Changes to this policy

If we change how we handle data (for example by adding cloud project storage or payments), this policy is updated before the feature opens and the date above changes. Effective October 28, 2026.