Privacy

Last updated 2 September 2026

Who is responsible

The controller for processing on this site is:

What this site does not do

It sets no cookies. It stores nothing on your device — no local storage, no session storage, no fingerprinting. There are no accounts, no forms and no comment system, so there is nothing here for you to submit. There are no embedded videos, fonts, maps or social widgets loaded from other companies.

If you email us

The Impressum publishes an address, and writing to it is the only way to send anything to us from here — the site itself sends and stores nothing. If you write, your address and what you sent are kept in the mailbox and used to answer you. They are shared with nobody, and a one-line request to the same address deletes them.

Legal basis: Art. 6(1)(b) GDPR — you asked, and answering is the processing.

Hosting and server logs

The site is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. Serving a page necessarily involves your IP address, the address requested, the time, the referring page and your browser's user-agent string being processed by Cloudflare's servers.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is delivering the site reliably and protecting it from attack and abuse.

Transfer outside the EU: Cloudflare is a US company and may process data outside the European Economic Area. Transfers are covered by Standard Contractual Clauses and by Cloudflare's certification under the EU–US Data Privacy Framework. A data processing agreement is in place.

The application

Frames runs on your Mac and has no network entitlement. It sends nothing — no telemetry, no crash reports, no usage counts, nothing at all.

The catalogue — your verdicts, ratings and recipes — lives in Frames' own container on your Mac and nowhere else. It stores what a photograph's EXIF says, which includes the camera body's serial number.

Scene analysis and masking use Apple's Vision framework on the Mac itself. No photograph leaves the machine to be looked at.

When allowed, Frames writes a full-resolution rendering of a development into the Photos library, and iCloud Photos syncs it to every device on the account. Photos' own Revert to Original undoes it. Frames asks before the first one, and the Photos source panel holds the switch.

Purchase and trial state go through Apple's StoreKit. Frames sees no payment details.

How long anything is kept

Server logs are retained by the host for a short period for security and diagnostics. Nothing else about a visit is recorded.

Your rights

Under the GDPR you have the right to:

• access the personal data held about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable form (Art. 20)
• object to processing based on legitimate interest (Art. 21)

You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of the federal state in which the controller is established.

Changes

This notice describes the site as it stands on the date above. It will be updated when the site starts doing something new — the beta mail link arrived and left that way, and this page changed in both commits.

See also the Impressum.