Privacy notice

This notice explains what personal data Frame UI uses, why we use it, who may process it on our behalf and the choices available to you.

Last updated: 20 September 2026

1. Who is responsible for your data

James Pearce, trading as Frame UI, is the data controller for the processing described in this notice.

Correspondence address:
26 Reginald Road
Scunthorpe
North Lincolnshire
DN15 8PQ
United Kingdom

For privacy questions, rights requests or to withdraw consent, email [email protected].

Frame UI is an independent UK software project and is not a limited company.

2. Personal data we collect

Beta waitlist

If you join the waitlist, we collect the email address you submit, when you joined, when you confirmed that you are 18 or over, when you gave email consent, and the versions of the privacy and consent wording linked to that sign-up. We do not ask for your date of birth.

Website operation and security

When you visit the site, hosting and security providers may process technical request data such as IP address, browser or device information, requested pages, timestamps and security-related request information. This is used to deliver, secure and troubleshoot the website.

Website analytics

Frame UI uses a privacy-minimised, server-side analytics system running on our Cloudflare infrastructure. It records aggregate daily statistics about requested pages, coarse country/region, broad device type, browser and operating-system category, referrer domain and UTM campaign tags where present.

We do not store IP addresses, analytics cookies, local-storage identifiers, fingerprinting identifiers, full referrer URLs or an individual visitor's browsing history in the analytics dataset. The purpose is to understand how the website is being used and improve its content, performance and navigation.

Messages you send us

If you email Frame UI or send feedback, we receive the information you include in that message and the contact details needed to reply.

3. Why we use personal data and our lawful bases

Purpose	Lawful basis
Administer the adult-only public beta waitlist and record that a participant confirmed they are 18 or over.	Legitimate interests in running an adult-only pre-release testing programme and keeping the minimum eligibility record needed to administer it.
Send beta access, launch information and closely related Frame UI product updates to waitlist members.	Consent. You opt in using the unticked email checkbox on the waitlist form.
Operate, secure and troubleshoot the website.	Legitimate interests in providing a reliable and secure website.
Produce privacy-minimised aggregate website statistics so we can understand traffic and improve the site.	Legitimate interests in understanding and improving Frame UI's website. The stored analytics dataset is deliberately aggregated and does not contain a visitor identifier or IP address.
Respond to questions, support requests and feedback.	Legitimate interests in communicating with people who contact the project and improving Frame UI.

4. Beta and product emails

Joining the waitlist is optional. The waitlist checkbox asks for consent to receive emails from Frame UI about beta access, launch availability and closely related product updates. Consent is separate from simply browsing the website and is not pre-ticked.

You can withdraw consent at any time by using the unsubscribe option included in Frame UI emails or by emailing [email protected]. Once consent is withdrawn, we will stop using your email for that marketing purpose.

If you unsubscribe, we keep the minimum suppression information needed to record the opt-out and prevent further marketing emails unless you later actively opt in again. This includes the email address, subscription status, unsubscribe timestamp and a random unsubscribe token.

5. Who processes data for us

We use service providers needed to host and operate the website, waitlist and beta communications. This currently includes Cloudflare for website delivery, security and the infrastructure used by the waitlist, and Resend to deliver Frame UI beta and product emails. The site also loads web fonts from Google Fonts, which means a visitor's browser may make a request to Google's font-delivery infrastructure.

These providers act under their own service and data-protection terms. We do not sell personal data and we do not disclose waitlist data to third parties for their own advertising.

6. International processing

Cloudflare, Resend and Google operate internationally, so technical or service data may be processed outside the UK. Resend's sending region for Frame UI is configured to Ireland, but Resend states that customer data such as message content and delivery logs is stored in the United States. Its Data Processing Addendum includes transfer safeguards including the UK Addendum to the EU Standard Contractual Clauses and participation in the EU-U.S. Data Privacy Framework with the UK Extension. Other providers may use their applicable recognised safeguards or another lawful transfer mechanism.

You can email [email protected] if you want more information about the safeguards relevant to Frame UI's service providers.

7. How long we keep data

Active waitlist, age-confirmation and consent records: while needed to administer the beta and launch communications, and normally no longer than 12 months after the public release unless a longer period is needed to honour a beta entitlement, resolve a dispute or comply with law.
Unsubscribe suppression record: kept for as long as reasonably necessary to make sure we honour the opt-out and do not restart marketing without a new opt-in.
Contact and feedback messages: normally up to 12 months after the conversation is closed, unless a longer period is reasonably needed.
Technical hosting/security data: according to the applicable provider's operational retention periods and only for as long as needed for delivery, security and troubleshooting.
Aggregate website analytics: normally up to 24 months so we can compare site usage and launch periods over time. The analytics table does not retain IP addresses or individual visitor histories.

8. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to access your personal data, correct inaccurate data, ask for deletion, restrict processing, object to processing and receive certain data in a portable form. Where processing is based on consent, you can withdraw that consent at any time.

To exercise a right, email [email protected]. We may need enough information to verify that the request relates to you.

Your right to object: where Frame UI relies on legitimate interests, you may object to that processing. You also have an absolute right to object to personal data being used for direct marketing. Email [email protected] to object.

9. Data-protection complaints

You can raise a data-protection complaint by emailing [email protected] and making clear that you are complaining about how personal data has been handled.

Frame UI will acknowledge a data-protection complaint within 30 days of receipt, take appropriate steps to investigate it without undue delay, keep you informed where appropriate and tell you the outcome. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies and similar technologies

Frame UI's own website analytics are collected server-side from ordinary page requests and do not set an analytics cookie, use local storage or assign a visitor ID. Cloudflare may use strictly necessary security technologies when required to protect or deliver the site. See the Cookie policy for details.

11. Changes to this notice

We will update this notice when the website or Frame UI's data processing materially changes. The date at the top shows the current version.