How we handle your data.

FrameSaver is built to be simple and respectful of your privacy. This page is the plain-language version of what that means in practice.

This policy is a draft for transparency, not a substitute for legal advice. Review it with a qualified attorney before relying on it as legally binding.

To run the service, we store:

• Your email address — used to sign you in via a one-time code. We don't use it for marketing.
• Photos you upload — stored privately in your account. Only you can see them.
• Your settings — screensaver duration, transition style, selected photo sources.
• Your favorites — photos you've marked as favorites while browsing.
• A session cookie — set by our authentication provider to keep you logged in.

No passwords (we use one-time email codes instead). No ad-tracking pixels. No cross-site profiling. No sale of data to third parties — ever.

FrameSaver runs on a small set of trusted infrastructure providers:

• Supabase — hosts your account, photos, and settings.
• Vercel — hosts the website and collects anonymous performance metrics (Web Vitals) to help us keep it fast.
• Smithsonian Open Access and Wikimedia Commons — read-only public APIs we query to fetch photography for the screensaver. They don't see who you are; we proxy anonymous requests on your behalf.

You can delete your account at any time — email us and we'll remove your email, photos, settings, and favorites from our databases. We don't keep backups beyond what our hosting providers use for their own disaster recovery.

If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA — including access, correction, portability, and deletion. To exercise any of these, email us.

If we materially change what we collect or how we use it, we'll update this page and the “last updated” date above. For significant changes, we'll also send a note to your account email.

Questions or requests? ericfriedman@gmail.com.