Privacy policy
FramePond · Effective November 2, 2026
Information we use
Google sign-in provides an account identifier, email, profile name and an optional profile photo URL. We store these with an account ID, session expiry, saved prompts, lifetime unlock records and subscription records. We do not receive your Google password or store card numbers.
Why we use it
Account information supports sign-in, access control, your saved collection and the free and monthly Pro unlock allowances. Billing identifiers and signed Creem events confirm payments, renewals, cancellations, refunds and disputes. Security counters use hashed network identifiers to limit repeated requests.
Services and storage
Cloudflare hosts the site and account database. Google handles sign-in; Creem handles checkout and billing. These providers may process data internationally under their own policies. Essential secure cookies keep you signed in; a local browser preference stores your theme. Account pages do not add advertising trackers.
Image processing
When you generate, we send your prompt and selected image settings to ToAPIs for processing. We do not include your Google profile or email in generation requests. We store prompts, task identifiers, credit and cost records in Cloudflare D1 and generated images in private Cloudflare R2 storage. Images are removed after the 30-day download period; task and accounting records remain as needed to provide the service and resolve billing issues. Provider processing follows its own policies and may occur internationally. Avoid submitting sensitive information that is not needed for the image.
Growth Analytics and Attribution Privacy
We aggregate public views and clicks via Cloudflare without ad tracking IDs. In a tab, restricted channel, landing page, guide, and campaign tags persist for 30 minutes. Upon signup, this initial source links to accounts to tally unlocks, successful generations, Agent connections, and payments via existing ledgers, without treating interactions as unique visitors. OAuth transition cookies expire within 10 minutes. Records exclude full referrers, search queries, prompts, and uploaded images. Enabling Do Not Track or Global Privacy Control stops growth tracking. Essential login, payment, and generation records operate normally.
Retention and your requests
Sessions expire after 30 days; sign-in challenges expire after 10 minutes. Account and billing records are retained while needed to provide the service, resolve disputes and meet applicable obligations. Contact support to request access, correction, export or deletion of your information. Records needed for legal or payment obligations may need to be retained.