Privacy

Last updated 2 September 2026

Who is responsible

The controller for processing on this site is:

What this site does not do

It sets no cookies. It stores nothing on your device — no local storage, no session storage, no fingerprinting. There are no accounts, no forms and no comment system, so there is nothing here for you to submit. There are no embedded videos, fonts, maps or social widgets loaded from other companies.

If you email us

The Impressum publishes an address, and writing to it is the only way to send anything to us from here — the site itself sends and stores nothing. If you write, your address and what you sent are kept in the mailbox and used to answer you. They are shared with nobody, and a one-line request to the same address deletes them.

Legal basis: Art. 6(1)(b) GDPR — you asked, and answering is the processing.

Hosting and server logs

The site is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. Serving a page necessarily involves your IP address, the address requested, the time, the referring page and your browser's user-agent string being processed by Cloudflare's servers.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is delivering the site reliably and protecting it from attack and abuse.

Transfer outside the EU: Cloudflare is a US company and may process data outside the European Economic Area. Transfers are covered by Standard Contractual Clauses and by Cloudflare's certification under the EU–US Data Privacy Framework. A data processing agreement is in place.

The application

Frames sends no telemetry, no crash reports and no usage counts. It does no cloud processing of any kind: nothing about your photographs is sent anywhere to be analysed, scored, described or improved.

If you turn it on, Frames syncs your decisions — ratings, verdicts, keywords, captions, creator and copyright details, the recipes and versions describing your developments, saved searches, looks, export presets, star meanings, composition intentions and marked observations, your Frames collections with their folders and order, the albums you hide, the sets you make by hand, and the names of your sources — between your own devices, through your own iCloud account. With it, Frames also syncs the scene analysis behind search: the measurements Apple's Vision framework made of each analysed photograph on one of your devices, and its feature print, a numerical summary used to find similar photographs. Frames asks before it starts, and the switch is in Settings. This is private to your Apple account; it passes through no server of ours and we cannot read it. Your photographs themselves are never uploaded by this.

The earliest trial start date syncs through your own iCloud account across your devices, even when Library Sync is off. This carries no photographs or library details and passes through no server of ours.

The catalogue — your verdicts, ratings and recipes — lives in Frames' own container on your Mac, and in your own iCloud account when syncing is on. It stores what a photograph's EXIF says, which includes the camera body's serial number.

Scene analysis and masking use Apple's Vision framework on the device itself. No photograph leaves the machine to be looked at, by us or by anybody else.

When allowed, Frames writes a full-resolution rendering of a development into the Photos library, and iCloud Photos syncs it to every device on the account. Photos' own Revert to Original undoes it. Frames asks before the first one, and the switch is in Settings › Ratings & Photos and in the Photos source panel.

If you turn on Automatically favorite rated photos, a Mac running Frames marks Photos photographs at or above the rating you choose as favorites in the Photos library, and removes only the favorites it added. It needs sync to be on. iCloud Photos carries the favorite to your other devices when that service is enabled.

Purchase and trial state go through Apple's StoreKit. Frames sees no payment details.

Journey stores recorded GPS coordinates with capture metadata and uses Apple Maps for its basemap. Map requests go to Apple to display the area being explored. Frames does not request your device's current location. Journey's photograph thumbnails use locally cached previews. To name the stops of the day you choose, Journey sends their coordinates to Apple and keeps the names on your device. Turn this off with Show Place Names in Settings.

How long anything is kept

Server logs are retained by the host for a short period for security and diagnostics. Nothing else about a visit is recorded.

Your rights

Under the GDPR you have the right to:

• access the personal data held about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable form (Art. 20)
• object to processing based on legitimate interest (Art. 21)

You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of the federal state in which the controller is established.

Changes

This notice describes the site as it stands on the date above. It will be updated when the site starts doing something new — the beta mail link arrived and left that way, and this page changed in both commits.

See also the Impressum.