Privacy Policy

Last updated: February 22, 2026

1. Introduction

Flash-n-Frame ("we", "our", "us") operates the website flashnframe.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account information: When you sign in via Google, GitHub, or Microsoft OAuth (or via email/magic link), we receive your email address, display name, and profile image from the identity provider.
Content you create: Infographics, images, and project data you generate or upload through the Service.
GitHub repository data: When you use the Repo Analyzer feature, we fetch publicly available repository metadata (file tree, file contents) via the GitHub API on your behalf.

2.2 Information Collected Automatically

Usage data: Anonymized analytics including AI provider usage, request latency, and feature usage patterns via Cloudflare Analytics Engine.
Log data: Server logs may include IP addresses, browser type, and request timestamps for debugging and security purposes.

3. How We Use Your Information

To provide and maintain the Service
To authenticate your identity and manage your account
To process your requests through AI providers (Google Gemini, OpenAI, Anthropic, xAI) via Cloudflare AI Gateway
To store and retrieve your images via Cloudflare R2
To monitor and improve Service performance and reliability
To enforce rate limits and prevent abuse
To respond to legal obligations

4. Third-Party Services

We use the following third-party services to operate the Service. Each has its own privacy policy governing how they handle data:

Supabase — Authentication and database
Cloudflare — Hosting, CDN, image storage (R2), AI Gateway, and analytics
Google (Gemini) — AI content generation
OpenAI — AI content generation
Anthropic — AI content generation
xAI (Grok) — AI content generation
Upstash — Caching and rate limiting (Redis)
GitHub — OAuth authentication and repository data access

When you use AI features, your prompts and content are sent to the selected AI provider through Cloudflare AI Gateway. We do not store your AI prompts beyond short-term caching (up to 5 minutes) for performance.

5. Data Storage

Database: User account data is stored in Supabase (PostgreSQL) hosted in AWS US East.
Images: Uploaded images are stored in Cloudflare R2 object storage, scoped to your user ID.
Cache: Temporary data is cached in Upstash Redis with automatic expiration (typically 5 minutes).

6. Data Security

We implement industry-standard security measures including: encrypted connections (TLS/HTTPS), JWT-based authentication, server-side API key management (keys never reach your browser), rate limiting, input validation, and CORS restrictions. However, no method of electronic transmission or storage is 100% secure.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent for data processing (by discontinuing use of the Service)

To exercise these rights, contact us at privacy@flashnframe.com.

8. Cookies

We do not use tracking cookies. Authentication state is managed via Supabase client-side sessions stored in your browser's local storage. Cloudflare may set functional cookies required for security and performance (e.g., bot detection).

9. Children's Privacy

The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@flashnframe.com.