Privacy Policy

Who is responsible for your data

QuickScreens is operated by the entity named at the foot of this page, which is the data controller for the processing described here. For anything in this policy — including any request to see, correct or delete your data — write to support@quickscreens.app.

What never leaves your device

The editor runs entirely in your browser. There is no upload step and no server-side rendering, so the following never reach us and we could not produce them if asked:

• Your screenshots and any images you import.These are held in your browser’s IndexedDB storage on your own machine.
• Your projects — captions, layouts, backgrounds, device choices and export settings.
• Your exported files.Export is performed by your browser’s canvas and download machinery. The finished PNGs and ZIPs are written straight to your downloads folder.

Clearing your browser’s site data for quickscreens.app erases all of it permanently. We hold no copy, so there is nothing for us to restore.

What we do collect

If you buy a licence

Checkout is handled by Stripe. We never see or store your card details. Stripe passes us the result of the payment, from which we keep: your email address, the Stripe checkout session and payment identifiers, a random device identifier generated by your browser, and the time of purchase.

We use this to mint and deliver your licence key, to unlock exports on your devices, and to revoke the licence if the payment is later refunded or charged back. Legal basis: performance of our contract with you (UK/EU GDPR Art. 6(1)(b)), and legal obligation (Art. 6(1)(c)) for the transaction records tax law requires us to keep.

When your licence is checked

Each browser that uses a licence stores a random identifier — a UUID with no connection to you, your hardware or your network. We record which identifiers have used a key and when, so that a licence works across your own devices while remaining capped at 5 concurrent ones. Past that limit the least recently used device is displaced rather than refused, so you cannot lock yourself out. Legal basis: performance of our contract (Art. 6(1)(b)), and legitimate interests (Art. 6(1)(f)) in preventing licence sharing at scale.

If you post to the feedback board

We store what you write, the device identifier described above, and — if you choose to give one — your email address, used solely to tell you when your request ships. We also store a salted SHA-256 hash of your IP address. The hash exists only to enforce posting and voting limits; it is not reversible to an IP address by us, and we do not use it to identify or profile you. Legal basis: legitimate interests (Art. 6(1)(f)) in running a usable board that resists spam and vote-stuffing, and consent (Art. 6(1)(a)) for the optional notification email.

Analytics

We use Google Analytics 4 to understand which pages and features get used. It measures pages and product events — it does not read your screenshots, your captions, or anything else in the editor.

In the EEA, the UK and Switzerland, analytics storage is denied by default and nothing is stored unless you accept the prompt. You can change or withdraw that answer at any time through Cookie settings in the footer of any page. Legal basis: consent (Art. 6(1)(a)). Elsewhere we rely on legitimate interests (Art. 6(1)(f)) in understanding aggregate usage, and the same control still applies.

Server logs

Our host, Cloudflare, processes IP addresses and request metadata to serve the site and to protect it from attack and abuse. This is ordinary infrastructure logging, retained briefly. Legal basis: legitimate interests (Art. 6(1)(f)) in keeping the service available and secure.

Cookies and similar technologies

We set no advertising cookies and run no cross-site tracking. The editor uses your browser’s local storage for things it cannot work without — your saved projects, your licence status and the device identifier. These are strictly necessary for functionality you have asked for and are not used for tracking. Analytics cookies are set only as described above.

Who else processes your data

We keep this list short on purpose. Each of these acts on our instructions under a data processing agreement:

• Stripe — Payment processing and checkout. Stripe receives your payment details directly; we never see or store them. Data: Name, email, billing country, card details, transaction records. Privacy policy
• Cloudflare — Hosting, content delivery, and the database holding licence and feedback records. Data: IP address and request metadata (transient), licence and feedback records at rest. Privacy policy
• Resend — Sending your licence key and, if you leave an address, feedback notifications. Delivery runs on Amazon SES. Data: Email address, message content. Privacy policy
• Google (Analytics 4) — Aggregate usage analytics. Loaded only where permitted, and only with consent in regions that require it. Data: Pseudonymous usage events, approximate location derived from IP. Privacy policy

We do not sell personal data, and we do not share it for advertising. We are based in the United States, so the data described above is processed there. Where UK or EU data protection law applies to you, transfers rely on the EU–U.S. Data Privacy Framework for providers certified under it, or on the European Commission’s Standard Contractual Clauses.

How long we keep things

• Licence records — for as long as the licence is valid. Because this is a lifetime licence, that is indefinite; deleting the record would revoke your purchase.
• Transaction records — for the period tax and accounting law requires in the country where we are established, typically six to seven years, after which they are deleted.
• Device activation records — while the licence is valid. Displaced devices drop off automatically.
• Feedback posts — until you ask us to remove them, or until the board is pruned.
• Analytics — retained by Google for a maximum of 14 months.

Your rights

If you are in the UK or EEA you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting what came before.

Email support@quickscreens.app and we will respond within one month. Because we hold so little, the practical answer to most access requests is your purchase record and any feedback you posted — please write from the address you used at checkout so we can match it.

Note that erasing your licence record revokes the licence, since the record is what proves the purchase. We will say so and confirm before acting.

You also have the right to complain to your local data protection authority. We would rather you came to us first, but that right is yours regardless.

Children

QuickScreens is a tool for people publishing apps and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we change this policy in a way that affects your rights, we will update the effective date at the top and, where the change is significant and we have your address, tell you by email.

See also our Terms of Service.