Privacy policy
Last updated: 8 November 2026
- Your screenshots, texts and projects never leave your device. The editor runs entirely in your browser and we cannot see your work.
- We use no analytics, no advertising, no tracking cookies and no third-party fonts.
- We only process personal data when it is needed to run the website, sell and check Pro licenses, and answer your emails.
1. Who is responsible
The controller of your personal data under the EU General Data Protection Regulation (GDPR) is:
Email: [email protected]
For any privacy question or request, email us. We answer within one month at the latest.
2. Your work stays on your device
Images you add, texts, layouts and projects are processed only inside your browser. They are not uploaded to us or to anyone else. To survive a page reload, the current project is saved in your browser's storage on your device (IndexedDB). You can delete it at any time by clearing this site's data in your browser settings. Project files you save are stored wherever you choose.
3. What we process, why and for how long
| Situation | Data | Purpose and legal basis | Kept |
|---|---|---|---|
| Visiting zupmu.com | IP address, browser type, requested page, time (server logs) | Delivering the website securely and fending off attacks. Legitimate interest, Art. 6(1)(f) GDPR. | Handled by our host Cloudflare and deleted after a short period, usually within days. |
| Buying Pro | Name, email, country, billing details, payment data, order details | Processed by Lemon Squeezy, which sells Zupmu Pro as the reseller (merchant of record). We receive the order details (name, email, country, product, price) to deliver the license, give support and handle refunds. Contract, Art. 6(1)(b), and legal obligations, Art. 6(1)(c). | Order records: 7 years, as required by Estonian accounting law. Payment card data is never seen by us. |
| Activating or checking a Pro license | License key, device label (browser, operating system, date), activation ID, the email linked to the license | Checking that the license is valid and counting activations. Your browser sends this through our server to Lemon Squeezy. Our server does not store it. Contract, Art. 6(1)(b). | In your browser until you remove Pro from the device. At Lemon Squeezy for as long as the license exists. |
| Emailing us | Email address, name, your message | Answering you. Legitimate interest, Art. 6(1)(f), or steps before or under a contract, Art. 6(1)(b). | Up to 2 years after the conversation ends, unless needed longer for a legal claim. |
4. Storage on your device
Zupmu stores a few items in your browser. They are strictly necessary for features you use and are never used for tracking, so no consent banner is needed:
| Name | Type | What it does |
|---|---|---|
| zupmu → zupmu-autosave-v1 | IndexedDB | Your current project, so a reload does not lose your work |
| zupmu-license | localStorage | Your Pro license key, activation ID and license email |
| zupmu-theme | localStorage | Light or dark mode |
| zupmu-storeview | localStorage | Size of the store preview window |
When you click the buy button, the Lemon Squeezy checkout opens. Lemon Squeezy may set its own cookies there, as described in its privacy policy.
5. Who we share data with
- Cloudflare, Inc. hosts the website and runs our license proxy (processor). Privacy policy.
- Lemon Squeezy (a Stripe company) sells Pro, issues invoices, handles taxes, payments and refunds, and checks license keys. It acts as an independent controller for the purchase. Privacy policy.
- Google (Gmail) provides our email inbox (processor). Privacy policy.
Some of these companies process data in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses (Art. 45 and 46 GDPR). We never sell personal data and never use it for advertising.
6. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to processing, and to receive it in a portable format (Art. 15–21 GDPR). Where we rely on consent, you can withdraw it at any time. To use these rights, email us. You can also complain to a data protection authority. In Estonia that is the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, Tatari 39, 10134 Tallinn, [email protected]), or the authority in your own country.
7. Children
Zupmu is a tool for app developers and is not directed at children. Buying Pro requires being of legal age or having a parent's or guardian's permission.
8. Security
The site is served only over HTTPS with strict security headers. Because your work stays on your device, the safety of your projects also depends on the security of your own device and browser.
9. Changes
If we change how we handle data, we will update this page and the date at the top. Important changes will also be announced on the website.