Frametide

Privacy policy

Last updated: October 2026

In short: this website sets no cookies, has no tracking, keeps no IP addresses and loads nothing from other servers. The Frametide app only sends my server what's needed for the license and AI presets. No names, no files, no serial numbers. Below is exactly which data goes where.

1. Controller

Michael Steininger
Altenburger Allee 1, 77656 Offenburg, Germany
E-mail: support@frametide.de

2. Hosting

The website and the app's server run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center in Germany. Hetzner processes the data on my behalf (Art. 28 GDPR).

3. Visiting this website

When you open a page, your browser transmits technically necessary data (IP address, time, page requested, browser identifier). To know how many people visit the website and click "Download", the web server records page views without IP addresses: only the time, the page (including a ?ref= tag in the link, if any), the domain of the website you came from (for example youtube.com, not the full address), the browser identifier and whether the request worked. The browser identifier is only used to leave out search engines and other bots. This record cannot be traced back to you, contains nothing per person and is deleted automatically after 14 days. The same applies when your browser loads the website's style sheet; that only shows how many visits came from a real browser rather than a bot. Images and fonts are not recorded at all. If a technical error occurs, the web server's error log may contain the IP address; it is also deleted automatically after 14 days. The legal basis is my legitimate interest in secure operation and in knowing whether the website is used (Art. 6(1)(f) GDPR).

There are no cookies, no analytics or advertising services, no embedded third-party content and no fonts from other servers.

4. Download and updates (GitHub)

The app's installer and updates are hosted on GitHub (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). "Download" forwards you there, and the app checks there for updates when it starts, every few hours while it runs and when you click "Check for updates". GitHub receives your IP address and the browser or program identifier. The legal basis is providing the app (Art. 6(1)(b) GDPR) and my legitimate interest in reliable delivery (Art. 6(1)(f)). Transfers to the USA are based on the EU-US Data Privacy Framework, in which GitHub participates through Microsoft. GitHub's privacy information: GitHub Privacy Statement.

5. Buying the subscription (Polar)

You buy the subscription from Polar Software, Inc. (USA), which acts as reseller (merchant of record). Polar itself collects the data needed for payment, invoicing and VAT (e.g. name, e-mail address, country, payment details) and is the independent controller for it. Payments are processed by Stripe. Polar's privacy information: polar.sh/legal/privacy.

My server only asks Polar whether a purchase is paid and which license key belongs to it. In doing so I see the identifiers of the order, customer and license, but no payment details.

6. Data the app sends

Everything else the app records (settings, backups, presets, measurements) stays on your PC. Only the following goes to my server:

a) License check

The license key and device label are passed to Polar for activation. Per license and month, my server stores only a counter of the AI generations used and, for purchases inside the app, a hash of the one-time pick-up code with the order ID and timestamps. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

b) AI presets (Anthropic)

When you let the app create presets, it sends my server:

My server forwards this to the AI Claude by Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, USA, which creates the presets. Anthropic processes the data on my behalf and, according to Anthropic, doesn't use it to train its models. Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). My server doesn't store the request. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

Please don't put personal information in the note field; it is sent to the AI along with everything else.

c) Server logs

To prevent abuse, the server limits the number of requests per IP address; the IP addresses are kept in memory only for this. The server's program log contains technical identifiers (order, customer and license at Polar) but no IP addresses. It is limited in size and overwritten continuously. The legal basis is my legitimate interest in secure operation (Art. 6(1)(f) GDPR).

7. Contact by e-mail

If you write to me, I process your address and your message to answer it (Art. 6(1)(b) or (f) GDPR). I delete messages once they're dealt with, unless a legal retention period applies.

The mailbox is run by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, on my behalf (Art. 28 GDPR). E-mails are stored in data centers in the EU. Where companies of the Zoho group outside the EU can access them, for example for technical support, this is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Zoho's privacy information: zoho.com/privacy.html.

8. Retention

I keep data only as long as needed for the purpose. The server deletes the monthly usage counters automatically after 12 months, and expired pick-up codes at the latest 24 hours later with the next purchase. Statutory retention of invoices lies with Polar as the seller.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to support@frametide.de for any of these.

You can also complain to a data protection supervisory authority, for example the one responsible for me: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.