Privacy Policy

This is an operational privacy notice describing how Framimo actually works today. It is not a substitute for independent legal review.

The short version

Conversion and editing run in your browser by default. Source files stay on your device. We do not upload media silently. The only time a file leaves your device is when you explicitly opt into server processing (today: animated AVIF).

Local processing

GIF, animated WebP, and MP4 exports are encoded locally using Web Workers and, where available, WebCodecs. Edits operate on a working copy; the original you dropped in is not overwritten.

Optional server processing

If you click “Process on our server” for a format your browser cannot encode locally, the working copy is uploaded to Cloudflare R2 via a short-lived signed URL. A separate transcoding service converts it. We store a job record (status, format, expiry) in Cloudflare D1. Both the uploaded source and the result are deleted automatically after 24 hours, and you can delete a job immediately. We do not use server-processed media to train models or for advertising.

Accounts and billing

If you create an account we store your email, a one-way password hash (PBKDF2), a revocable session token, and — if you subscribe — Stripe customer and subscription identifiers. Payment card data never touches our servers; Stripe is the merchant of record. See Refunds & cancellation.

Analytics and cookies

• Strictly necessary: a session cookie if you sign in. This is required to keep you logged in.
• Analytics (opt-in): first-party event names such as “export completed” written to our own database. No third-party ad pixels. We only send these after you accept analytics in the banner. Metadata never includes raw media.
• Reliability: error and Core Web Vitals reports may be sent to Sentry without personal identifiers, so we can keep the product working. Session replay is off.

You can change analytics consent any time by clearing this site’s data for framimo.com (the banner will ask again) or by writing to us via Support.

We do not sell your data

We do not sell personal information. We do not share media or account data with advertisers. Ads on the free tier, when a network is wired in, will be loaded only in reserved page-level slots — never over the editor — and will not run until a real network is connected.

Retention

• Local files: never stored by us.
• Server job files: hard-deleted within 24 hours (hourly cleanup).
• Account records: kept while the account exists; email us to delete.
• Analytics events: aggregated operational data, no raw media.

Contact

Questions or deletion requests: Support.