Privacy Policy

Last updated: October 23, 2026

This Policy explains what FramePeek collects and how it is used. We aim to collect as little as possible.

1. What we collect

• Uploaded media — the photos, GIFs, and videos you add to your grid, their file names, the thumbnails and previews we generate, your folders, and the share links you create.
• Account data — your email address, your password (stored only as a salted hash, never in plain text), your Google account ID if you sign in with Google, the sign-up date, and your plan and subscription status.
• Session and sign-in data — an anonymous session ID stored as a cookie to keep your session separate (it is not tied to your identity unless you create an account), and a sign-in cookie for accounts.
• Billing data — payments are handled by Paddle. We receive your plan, subscription status, and subscription ID, not your full card details.
• Visit statistics — page views, button clicks, sign-up events, an A/B test group, your IP address, and your browser type, recorded to understand how the Service is used and to fix problems.
• API activity (Plus and Pro accounts that use API keys) — time, key ID, request type, result, and data volume, plus a short code derived from your IP address with a secret that changes every day. We do not record file names or file contents. We may also record and email the operator an alert when a key looks misused, naming the account email and key ID.
• Administrator records — actions taken on accounts (such as plan changes or suspensions) with the reason, and a log of payment events.
• Server and error logs — technical records needed to run and secure the Service.
• Messages you send us — for example support emails.

2. How we use it

We use your data to provide your galleries, keep accounts secure, process payments, send account emails (verification and password reset), understand how the Service is used, and prevent abuse. As stated in our Terms, content and usage data may also be used to operate and improve the Service (speed, performance, reliability, and quality). We send marketing emails only if you choose to receive them when you sign up or in My Account, and you can turn them off at any time. We do not sell your data.

3. Cookies

We use these cookies:

• vsid — anonymous session ID; kept until you close your browser.
• auth — keeps you signed in; kept for 30 days.
• fpv — remembers your A/B test group so visit statistics are consistent; kept for about 6 months.
• fplk — counts one like per visitor on showcase works; kept for 1 year.

We do not use third-party advertising trackers.

4. Storage & retention

Media is stored on FramePeek infrastructure and is served to your own session or to anyone holding a share link you create. You may delete individual items or request account deletion at any time. Items you delete move to a Trash, where you can restore them. Even after you empty the Trash or delete your account, content may still be stored in backups, which are managed with appropriate security measures. You can ask us at any time to delete your content from backups. You can turn a share link off at any time in My Account.

How long we keep media depends on how it was uploaded:

• Uploaded without an account: automatically removed from your gallery about 15 days after upload. Create an account before the files expire, and you can move them into your account to keep them.
• Uploaded while signed in: kept until you delete the items or your account is deleted. Ending a paid plan does not delete them — see the storage policy in our Terms of Service.

Content you upload may be used to operate the Service and to improve its speed and quality. If you need anything deleted, including from backups, please send us a request at [email protected].

Other data: account data is kept while your account exists. API activity records are kept for 30 days. Visit statistics, administrator records, and server logs are kept for as long as needed to run, secure, and improve the Service. Payment records are also kept by Paddle and, where required, by us for tax and accounting.

5. Who receives your data

We use service providers to run FramePeek: Paddle (payments; it acts as Merchant of Record and handles your billing data under its own privacy policy), Resend (sending our emails), Cloudflare (network and delivery), and Google (sign-in, only if you choose it). They may process data in countries other than yours, including the United States. We may also disclose data when the law requires it or to protect rights and safety.

6. Your choices and rights

• Delete individual items (they go to the Trash, where you can restore them), or start a new gallery to clear your session.
• Turn marketing emails on or off in My Account at any time.
• Contact us to request deletion of your account, your stored media (including backup copies), or specific content.
• Depending on where you live, you may also have the right to access, correct, export, or delete your data, to object to or restrict some uses, to withdraw consent, and to complain to your data protection authority. Email [email protected] and we will reply within one month.

Contact

FramePeek · operated by BANG GANGNYENG, Ganseok-dong, Namdong-gu, Incheon, Republic of Korea · [email protected]