Privacy policy

1. Captures stored in your browser

UIFrom reads the active page address to show the current website and processes scans or block selections you request. It does not build a browsing history. Captures can contain the source address without its query string or fragment, page title, measured styles, element structure, capture date, your reference name and pinned status, and a screenshot of the visible page or selected element when available.

Code captures also contain the selected block’s markup and visible text, inline SVG and asset URLs. Source text, page titles, images, CSS values and asset URLs can contain personal or confidential information, including query parameters in linked asset URLs. Review captures before sharing them.

References are stored locally in your Chrome profile using IndexedDB. UIFrom does not automatically send captured page content, screenshots or exported code to our licensing server or an AI provider. You choose whether to copy, download or share them. We do not use your captures to train AI models.

During block export, UIFrom can request external stylesheets without cookies to recover font definitions. Previews and code used in a browser or project can load images and fonts from the original asset URLs. Those hosts receive the requests and associated network information, including your IP address. Their resources and privacy practices are outside UIFrom’s control.

Download backup saves a local file containing your Saved references. Restore backup reads a UIFrom backup you choose and adds its references to Saved. Downloaded files and clipboard contents remain under your control on your device.

2. Purchase and activation information

UIFrom uses an online licensing service to manage Pro purchases, activation, purchase recovery and payment status. Creem processes payments, Cloudflare hosts the licensing service, and Mailtrap delivers purchase recovery emails. These services also process information when you use a test checkout or test purchase recovery.

When you start a purchase, restore access or check Pro status, the extension sends a random installation identifier and a secret installation credential over HTTPS to UIFrom’s licensing endpoint. They are stored in your Chrome profile. They are not a hardware fingerprint. These requests do not include captured page content or screenshots.

The licensing server stores a hash of the installation credential, installation and checkout identifiers, order and product identifiers, payment mode, purchase email, purchase status and the installation linked to the purchase in Cloudflare D1. Creem sends payment status notifications used to activate or revoke Pro.

For purchase recovery, you provide your checkout email. Mailtrap delivers a confirmation link to that address. The server stores a hash of its token, expiry, requesting installation and usage status. Confirmation moves Pro to that installation. It does not move Saved references.

A signed, time-limited entitlement and purchase status are kept locally. Hosting providers receive network information such as request IP addresses. UIFrom uses hashed rate-limit identifiers to help prevent abuse.

3. Pro export usage records

To help review refund requests and payment disputes, UIFrom records the first reported Pro code copy or download action associated with a purchase. This is a purchase support record, not marketing analytics.

The record contains the order identifier, a random event identifier, the installation identifier, the export format, the action reported by the extension, and the time our server receives the record. It is stored in Cloudflare D1 and linked to the purchase record, which contains your checkout email.

A copy record is sent after the browser reports that code was successfully copied to the clipboard. A download record is sent when the extension initiates a code download. These records do not confirm how the code is later used or whether a downloaded file was saved. The record does not contain the source website address, exported code, screenshots or clipboard contents.

If the connection fails, the extension keeps the pending record in local browser storage and retries later. In that case, the server timestamp reflects receipt of the record rather than the exact time of the export. Removing the extension before a pending record is sent can remove that record.

Free style scans, brief exports, ordinary page visits and opening a code preview are not recorded as Pro export usage. The record remains associated with the purchase after a refund so that we can review the transaction and any related dispute.

4. Website, checkout and support

If you contact support, we process the information you send, such as your email, order reference and problem description. Send only the page captures needed to explain the issue.

We have not added product analytics, Google Analytics, advertising pixels or marketing trackers to the extension or this website. The website does not use application cookies or browser storage for advertising or analytics. The extension stores references, settings and Pro access information locally to provide its features. Cloudflare can process technical request information and use security cookies when its protection features require them. The separate Creem checkout uses its own cookies and data practices. Browser cookie controls do not delete the extension’s Saved references.

See Cloudflare’s Privacy Policy, Creem’s Privacy Policy, Mailtrap’s Privacy Policy and Lark’s Privacy Policy.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Contractual necessity: Processing purchase, activation and recovery information to provide and manage your Pro access, and handling support requests relating to your purchase.
• Legitimate interests: Protecting the website and licensing service from fraud and abuse, maintaining their security, reviewing Pro export usage records for refund requests and payment disputes, and responding to general support inquiries, provided these interests do not override your rights and freedoms.
• Legal obligations: Keeping records and responding to lawful requests where required by applicable law.
• Consent: Where a separate optional use requires consent, we request it before that processing begins. We do not use analytics or advertising trackers in UIFrom.

For users outside the EEA, we process personal data in accordance with applicable privacy laws.

UIFrom’s use of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We limit processing to the disclosed functionality and related security and support. We do not sell user data or use or transfer it for advertising, data brokerage or creditworthiness decisions.

Captured page content stays on your device unless you choose to share it. If you share specific data with support, human access is limited to the assistance you request and the exceptions permitted by the Chrome policy, including security investigations and legal obligations.

6. Retention and deletion

Saved references remain in your Chrome profile until you delete them, remove the extension or otherwise clear that profile’s data. Removing the extension also removes its local installation credential and Pro entitlement. It does not remove downloaded files or server-side purchase records. Purchase recovery restores Pro access; it cannot recover references that were not backed up.

Recovery links expire after 15 minutes. Expired recovery records are scheduled for cleanup after a further 24 hours, with a daily cleanup schedule. Expired rate-limit records are also scheduled for daily cleanup. These are scheduled removals, not a guarantee of deletion at an exact minute.

Purchase and revocation records are kept to maintain access, support recovery and prevent refunded orders from being reused. First Pro export usage records are retained with the related purchase while needed to handle refunds, disputes or legal claims. They are not removed automatically when a refund is issued. Creem retains transaction records under its own policy. Deletion requests are assessed against the information still needed for the purchase, security and applicable recordkeeping obligations.

We keep installation and licensing records for as long as they are needed to maintain Pro access, restore purchases, resolve disputes or prevent misuse. Because Pro is a lifetime license, the records needed to recognize that license are not automatically deleted after a short period of inactivity. We retain support correspondence while needed to resolve and follow up on your request, or to meet applicable legal obligations or establish, exercise or defend legal claims. Operational logs are retained according to the enabled hosting features and provider settings, and are not used to build a marketing profile. You can ask us about retention or request deletion using the contact below.

7. International processing

UIFrom is operated from Ukraine. Cloudflare, Creem, Mailtrap and Lark provide services internationally, so purchase information, support messages and technical request information can be processed outside your country, including in the United States. Locally stored captures are not uploaded to these providers by UIFrom unless you choose to share them, for example as a support attachment.

Where data protection law restricts an international transfer, the transfer must use an applicable legal mechanism, such as an adequacy decision or approved contractual safeguards. The mechanism depends on the provider, destination and service configuration. Contact us for details of the safeguards applicable to your information. Provider privacy notices describe their own international processing.

8. Your Rights (GDPR)

You decide when to scan a page, capture a block, export a file or share a reference. Delete individual items in Saved, manage backups on your device and change the extension’s permissions through Chrome.

Depending on applicable law, you can request access, correction, deletion, restriction or portability, object to certain processing, and complain to a competent data protection authority. You can also withdraw consent for processing based on consent, without affecting earlier lawful processing. Some purchase information must be retained for legal or access-management purposes. We can ask for proportionate information to verify a request. Deleting records needed to recognize your purchase can affect our ability to restore Pro; we will explain this before acting on such a request. Use the contact below for requests about information held by UIFrom. Requests to providers are handled according to their respective responsibilities.

Privacy and support contact: support@uifrom.xyz.

9. Policy changes

Updates will be published here with an effective date. Material changes to how captures or license information are handled will be described before the changed processing begins, with consent requested where required.