Privacy Policy
Who is responsible. Jeffrey Wilkinson, Switzerland, operates Framelock and decides what happens to the data described here. Reach him at privacy@framelock.cc.
Framelock takes a video clip you upload, cuts it into the shapes different platforms want, and posts it to the accounts you connect. This page says exactly what that touches and what it does not.
What we hold
Your account
- Email address — to sign you in and to send a password reset. Nothing else.
- Display name, and an avatar URL if you signed in with Discord.
- A password hash, never the password. It is scrypt with a per-account salt, so the stored value cannot be turned back into what you typed.
- Your Discord user ID, if you linked Discord. We do not read your servers, your messages or your friends.
Your clips
The video you upload, and every version Framelock renders from it. These sit on our storage until you delete the clip or your account. We do not watch them, index them, or train anything on them.
Your platform connections
The tokens that let us post on your behalf. These are encrypted before they are written, with AES-256-GCM under a key that is not in the database, and they are never sent back to your browser — not even to you, not even masked. Once stored, the only thing that can read them is the server that posts for you.
What leaves the service, and where it goes
| Goes to | What | Why |
|---|---|---|
| The platforms you connect | The rendered clip, your caption, your title | Because that is the product. Only to destinations you have armed, only when you press Publish. |
| A transcription provider | The clip's audio, if you turn captions on | To produce word timings. No audio is sent unless you ask for captions on that clip. |
| Cloudflare | Everything — it is where Framelock runs | Hosting, storage and delivery. |
| An email provider | Your address, when you request a password reset | To deliver the link. No marketing mail is ever sent. |
That is the whole list. There is no analytics, no advertising, no tracking pixel and no third-party script on any page of this service.
Cookies
One. It holds a random session token, it is HttpOnly so scripts cannot read it,
and it identifies your session and nothing else. Signing out deletes it. There are no
advertising or measurement cookies, which is why this site has no cookie banner.
How long we keep things
- Clips and renders — until you delete them, or your account.
- Your account — until you delete it.
- Sessions — 30 days, and every one of them ends the moment you change or reset your password.
- Password reset links — one hour, and one use.
Deleting your account
Deleting your account removes your clips, your renders, your saved layouts and your stored platform tokens. What has already been posted to Instagram, TikTok or anywhere else is on that platform and under its rules — we cannot reach it, and deleting here does not delete there.
Your rights
You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted — write to privacy@framelock.cc. Deleting your account does all three at once and needs no request.
Framelock is operated from Switzerland and falls under the revised Federal Act on Data Protection (revDSG). If you are in Switzerland you can raise a complaint with the Federal Data Protection and Information Commissioner (FDPIC). If you are in the EU, EEA or UK the GDPR applies to you as well, and you can complain to your own national supervisory authority.
Children
Framelock is not for people under 16, and we do not knowingly hold their data.
Changes
If this policy changes in a way that matters, the date at the top changes and anyone with an account gets an email before it takes effect.