Privacy Policy

The short version

• You can use the editor and export images without an account. In that case nothing you make leaves your browser.
• Screenshots and favicons you drop into the studio are kept on your device only, in your browser's storage. We never receive them unless they are part of a design you choose to save or share.
• With an account we store your email, name and avatar from sign-in, your plan, and the designs, share links, backgrounds and brand kit you deliberately save.
• Share links are public. Anyone with the link can see the image.
• Payments are handled by Polar. We never see your card number.
• We use PostHog for product analytics, including session replays with all text inputs masked. We do not sell your data and we run no advertising.
• You can delete your account, and everything in it, from the studio at any time.

1. Who we are

Mockship is operated by Aman Qureshi, trading as Mockship, Hapa Road, Jamnagar, Gujarat, India (Mockship, we, us). We are the controller of the personal data described in this policy. You can reach us at support@mockship.app.

2. What stays on your device

The studio runs in your browser, and most of what you do never reaches us:

• Screenshots you drop into frames, favicons you upload, and backgrounds you upload on the free plan are stored in your browser's IndexedDB so they survive a reload. They are not uploaded.
• Your editor state, open project, palette, presets and theme preference are kept in your browser's local storage.
• Export happens entirely in the browser. The image file is generated on your device and downloaded or copied directly.

You can clear all of this by clearing site data for mockship.app in your browser. The studio also removes screenshots that no design refers to any more.

3. What we store when you have an account

Signing in is what creates data on our side. Depending on what you use, we hold:

• Identity: your email address, and the name and profile picture your Google account provides if you sign in with Google. Passwords are hashed by our authentication provider and are never visible to us.
• Plan and billing state: whether you are on the free or Pro plan, the billing interval, the current period end, whether you have cancelled, and your customer identifier at Polar.
• Saved designs: the settings of each design, a small thumbnail, and copies of the screenshots and other images that design uses. Saved designs are private to your account.
• Share links: the rendered image, an author label, a view count and the panel count for slides shares. These are public by design.
• Uploaded backgrounds (Pro): the original file and a thumbnail, private to your account, so your library follows you between devices.
• Brand kit: your logo, brand colour and watermark settings, private to your account.
• Feedback: the rating and message you send from the feedback form, with your email if you were signed in, so we can follow up.

Screenshots inside saved designs may show whatever was on your screen when you captured them. Treat what you save the way you would treat any private file in a cloud drive, and treat what you share as public.

4. Why we process it and on what basis

• To provide the Service you asked for, such as keeping your designs, publishing a link or syncing a background. This is performance of our contract with you.
• To take payment and manage your subscription. Contract, and our legal obligations around tax and accounting.
• To keep the Service secure and prevent abuse of free-plan limits. Our legitimate interest in running a reliable service.
• To understand how the product is used so we can improve it. Our legitimate interest, balanced by masking inputs in replays and collecting no more than we need.
• To send account emails such as sign-in confirmations, password resets and important changes to terms or pricing. Contract and legal obligation. We do not send marketing email.

5. Services we rely on

We do not sell personal data. We share it only with the providers below, each of which processes it on our behalf to run Mockship:

• Supabase: authentication, database and file storage for account data, saved designs, share images, backgrounds and brand kits.
• Polar: payments and subscription management. Polar is the merchant of record and collects your payment details directly under its own privacy policy.
• Resend: delivery of account emails such as confirmation and password reset messages.
• PostHog: product analytics and session replay, described in section 7.
• Vercel: hosting for the website and the server functions that talk to the services above.
• Google: sign-in with Google, and Google's favicon service, which our server queries with the domain you type into a browser frame so the matching icon can be shown.
• Unsplash: when you search for a backdrop, your search terms are sent to Unsplash through our server. No account information is included.
• X and Bluesky: when you paste a post link to make a post card, our server fetches that public post and its images.

Some of these providers are located in the United States. Where data leaves your region, transfers rely on the providers' standard contractual clauses or equivalent safeguards.

We may also disclose information where the law requires it, to protect the rights or safety of users or the Service, or as part of a financing, merger, acquisition or sale of assets. In that last case this policy continues to apply to your data.

6. Share pages and view counts

A share page shows the image, an author label and a view count. The view count increases once per browser session when the page is opened. We do not record who viewed a share. You can delete a share at any time from your Shares page, which removes the image from our storage and makes the link stop working.

7. Analytics and browser storage

Mockship uses no advertising cookies and no third-party marketing trackers. The storage we do use:

• Sign-in session: our authentication provider keeps your session token in local storage so you stay signed in. Strictly necessary.
• Preferences: your theme choice and editor state, described in section 2. Strictly necessary for the studio to work the way you left it.
• Analytics: PostHog sets cookies and local storage entries to recognise a returning browser and to link events into a session. It records page views, clicks and feature use, and may record a session replay of the interface. All text inputs are masked in replays and the canvas itself is never recorded, so your screenshots are not captured. Analytics is tied to a random browser identifier only. We do not link it to your account, so we cannot see which signed-in user did what.

You can block analytics with a content blocker or by disabling JavaScript for the PostHog domain; the studio works without it.

8. How long we keep data

• Account data and saved content: for as long as your account exists. When you delete your account, your designs, shares, backgrounds and brand kit are removed first and the account row is deleted with them.
• Billing records: kept by Polar and in our accounting records for as long as tax law requires, typically seven years.
• Analytics: retained under PostHog's configured retention and no longer than needed for the purposes above.
• Backups: our database provider keeps rolling backups for a short period, after which deleted data disappears from them too.
• Device storage: stays on your device until you clear it or the studio garbage-collects unreferenced screenshots.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. In practice:

• You can see and change your name and password in the Account panel, and see your plan in the pricing panel.
• You can delete individual designs, shares and backgrounds from their pages, or delete your whole account from the Account panel.
• For anything else, including a copy of the data we hold about you, email support@mockship.app from the address on your account. We respond within the period the applicable law requires, and may need to verify your identity first.

10. Security

All traffic to Mockship and to our providers is encrypted in transit. Files in your account are stored in private buckets that only your signed-in session can read, with the exception of share images, which are public by design. Access to production systems is limited to the people who run the Service. No system is perfectly secure, so please use a strong, unique password or sign in with Google. If a breach affects your data, we will notify you without undue delay as the law requires.

11. Children

Mockship is not directed at children. You must be at least 16, or the age of digital consent where you live, to create an account. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We will update this policy when the product changes in a way that affects your data. The date at the top shows the current revision. For material changes we will notify account holders by email or with a notice in the studio.

13. Contact

Privacy questions and requests go to support@mockship.app, or use the Support page. Postal address: Aman Qureshi, trading as Mockship, Hapa Road, Jamnagar, Gujarat, India.