Scope and responsibility
This notice covers LocalFrame’s extension and licence service, not every Velunoq app. Mehmet Emin Ozyigit, trading as Velunoq, is responsible for LocalFrame licence and support data. Based in the United Kingdom. Contact hello@velunoq.com.
Your images stay on your device
Image editing and background removal run locally. LocalFrame does not send your photos, cutouts, text, logos or projects to its licence server or an AI inference service. Projects and exports you download remain under your control. Optional local workspace recovery, preferences, brand assets and saved presets may remain in browser storage until you clear them. Uninstalling or clearing extension storage can remove local data; keep exported backups.
Web images and permissions
With your Chrome permission, LocalFrame can show an LF button when you hover over images on HTTPS pages. Clicking it imports the selected image. You can turn this off in settings and revoke site access. Protected browser pages are excluded. The image host receives the request and may see your IP address and requested image URL. Import requests omit cookies and referrer. This feature does not send your browsing history to the licence server.
Model download
On first use, background removal downloads approximately 200 MB of model data from Hugging Face and its delivery infrastructure. Those services receive network information such as your IP address and requested file. The model is cached locally for reuse; your photos are not included in that download request. Clearing browser storage may require another download.
Licence, payment and support data
The licence service processes a random installation identifier, purchase and subscription references, purchase category, activation records, paid-period status, and hashed licence or purchase-claim values. These allow activation, two-installation limits, automatic purchase confirmation and subscription verification. We do not use hardware fingerprinting. Hosted Stripe checkout collects payment and billing information; LocalFrame does not receive your full card number. If you contact support, we receive your message and contact details. Do not send passwords, full card details or private licence keys by email.
Service providers and legal grounds
Cloudflare hosts the licence API and storage. Stripe handles checkout and payment records; public checkout uses Managed Payments, with the merchant identified in checkout and receipt. These providers may also process data for their own legal obligations. Contract performance supports licence delivery and support; legitimate interests support proportionate security and fraud prevention; legal obligations support required accounting records. Browser permission controls optional site access. Requested licence recovery messages are sent through Resend; no marketing messages or images are included.
Storage and retention
Local storage remains until you clear it or remove the relevant item. Temporary unconsumed image transfers expire after about ten minutes, with cleanup when the browser runs. Unpaid, unbound checkout records are eligible for cleanup after 30 days; webhook deduplication records are eligible after 30 days. Current paid sandbox records have no automatic deletion schedule: requests are handled manually, considering verification, fraud prevention and legal obligations. This is a test service, not the production retention policy. A production retention schedule will be published before public sales begin. Provider payment records, logs and backups have separate retention and may outlast extension removal.
International processing and your rights
Providers may process information outside the UK. Production provider agreements, locations and applicable transfer safeguards will be reviewed before public sales. You can ask for access, correction, deletion, restriction, portability or object where applicable by emailing hello@velunoq.com. We may need proportionate identity verification. We normally respond within one month under UK rules and explain any permitted extension or justified retention. You may complain to the UK Information Commissioner at ico.org.uk/make-a-complaint/ or your competent local authority. No licence decision is based on profiling about your personal characteristics.
Changes
This notice is dated and will be revised before production processing changes. LocalFrame contains no advertising or analytics SDK. Website privacy is described separately at velunoq.com/privacy. This pre-release notice does not claim that production deployment or worldwide legal review is complete.
Subscription terms acceptance
When you explicitly accept the licence and subscription terms before checkout, we keep the version identifier, SHA-256 text digest and server acceptance time with the purchase reference. The versioned text can be downloaded for your records. We do not collect a signature image or extra device fingerprint for this acceptance. The record follows the purchase record’s retention and erasure process.