Your data, explained.

1. Information we process

• Account information: your email address, account identifier and authentication information when you use connected account features.
• Your shelf: saved resource identifiers, collection names and their contents when you save them to an account.
• Access records: plan, entitlement status and expiry used to check premium access, where an entitlement exists.
• Messages: your email address, message and attachments when you contact us.
• Technical information: requests to the service and its providers may include IP address, browser information, requested URL, time and errors needed to deliver and secure the service.

The current FrameShelf checkout does not collect payment card details or process purchases.

2. Cookies and browser storage

FrameShelf uses browser storage for guest saves, collections, composer drafts, theme and the compact introduction preference. These are not automatically shared between browsers. An explicit import action copies guest saves and collections to your signed-in account; it does not erase the guest copy.

Connected sign-in uses essential session cookies to maintain and refresh authentication. Blocking these may prevent account features from working. You can clear cookies and local storage in your browser settings, but doing so can sign you out and remove guest drafts or saves.

The current library does not include advertising pixels or a third-party audience analytics integration. We will update this notice and provide any required choices before adding non-essential tracking.

3. Why we use information

We use information to provide requested account and saving features, verify access, deliver downloads, respond to enquiries, resolve technical problems, prevent misuse and meet legal obligations. Where applicable law requires a legal basis, these purposes relate to providing the requested service, legitimate operational and security interests, legal obligations or consent where required.

Contacting FrameShelf does not subscribe you to a marketing newsletter. We do not sell your personal information.

4. Service providers and external requests

• Supabase: authentication and account-backed shelf and entitlement data when account services are connected.
• Cloudflare R2: private source-package storage and time-limited download delivery where configured.
• Hostinger Mail: messages you send to our business email.
• Google Fonts: the library and some previews request fonts from Google. These requests expose technical connection information such as IP address to that provider.

Hosting and infrastructure providers process requests necessary to deliver the site. We may disclose information when legally required or necessary to protect the service and users. Provider processing can occur outside your country; protections depend on applicable law and the provider’s arrangements.

See the providers’ own information: Supabase privacy, Cloudflare privacy, Hostinger privacy and Google Fonts privacy.

5. Retention and security

Guest data remains in your browser until removed or cleared by you or your browser. Account data is retained to provide the account service. Support correspondence may be retained to resolve enquiries, maintain a record of the issue and meet legal obligations. Retention also depends on operational logs and provider backup cycles; deletion from active records may not immediately remove backup copies.

We use authenticated access checks for private account data and premium downloads. No online service or storage system can guarantee absolute security. Do not email passwords, API keys or full card details.

6. Your choices and requests

You can remove saves and collections through the library. You can clear local guest data in browser settings. These actions are separate from deleting an account.

To request access, correction or deletion of account information, or to raise a privacy concern, email hello@getframeshelf.com. There is currently no self-service account-deletion button. We may need to verify that a request relates to your account and explain any information we must retain. Rights and response requirements depend on applicable law.

7. Children’s information

FrameShelf is intended for people building websites, not a service directed at children. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and address it.

8. Changes and contact

We will update this policy when data practices change and show the revision date above. For questions, use our Contact us page or email hello@getframeshelf.com.