Privacy policy

Last updated: 8 October 2026

Who is responsible

The data controller is BAARS DESIGN, org. nr. 938 054 037, registered in Norway (baars.design). Privacy questions and data requests: [email protected].

What we collect and why

When you sign in with Google we store your Google account identifier, email address, display name and avatar URL (needed to provide your account, performance of contract). When you sign in with Apple we store your Apple identifier and the email address Apple shares with us. If you choose Hide My Email, that is an Apple relay address, not your own. For Apple sign-in we also sign a session token for you, which our servers check but do not store. As you use the service we store the data you create: favourites, collections, rooms, households and their members, and slideshow settings. To reach your TV, The Framer Bridge you install reports its own name, version and platform (for example macOS or Windows), the name of the computer it runs on, the name (SSID) of the WiFi network that computer is on, and the TVs it discovers on your network, with each TV's name and local IP address. This is used only to route paintings to the right TV. If you upload a photo of a room, we read it in memory to measure its colours and light, and we do not store the photo. We keep only the measurements. If you enable the weather widget, we store the approximate location coordinates you set for it. If you subscribe, we store your subscription record, including your Stripe customer and subscription identifiers, or the App Store or Google Play purchase details if you subscribed in our app. Your card details are held by Stripe, never by us.

When you create an account we may also record where you came from: the campaign parameters in the link you followed (utm_*, ref), the website that linked to us (its hostname only, not the page) and the first page you landed on. Your browser holds this in memory until you sign in, and it travels with the sign-in redirect. We store it on your account as a first-touch record. We use it to learn which channels bring people to The Framer.

Because the service is a gallery chosen for you, we also record what you tell us about individual artworks (including the ones you pass over), any reason you give for liking one, and which paintings have been shown on your TV and for how long. From these we build a preference profile: our inference about the kind of art you like, used only to decide what to show you and in what order (performance of contract). It is never used to make a decision with legal or similarly significant effect, it is not shared with anyone, and it stays inside your account. You can see exactly what it says, and the evidence behind each part of it, under Settings → Your Taste, and reset it there at any time without losing your favourites.

What we don't collect

We do not sell data, run third-party advertising, or use tracking pixels. We do not store your Google or Apple password (authentication happens entirely with Google or Apple). The Bridge on your home network talks only to The Framer's servers and to your TV; it does not inspect other traffic.

Who processes data for us

We use a small number of service providers: Google and Apple (sign-in), Stripe (payments and VAT calculation), Apple and Google Play (verifying purchases made in our apps), Cloudflare (network routing in front of our servers, and encrypted off-site backup storage), and Open-Meteo (weather forecasts for the optional TV weather widget: if you enable it, our server and your browser send the approximate coordinates you set to api.open-meteo.com to fetch the forecast). Transactional email such as household invites and the welcome email is sent from our own mail server. Beyond these providers we do not share your data with anyone else, and no third party may use it for its own purposes.

Where data lives

Data is stored on The Framer's own server infrastructure in the EU/EEA. Artwork images are reproductions fetched from the source museums' public APIs and cached on our servers. Traffic is encrypted in transit via HTTPS.

Data retention and deletion

Your data is kept while your account is active. Deleting your account from the Settings page removes your profile, favourites, your preference profile and the judgements it was built from, and your memberships. If you are the only member of a home, it also removes that home with its collections, rooms, slideshows, wall history, subscription record and Bridge tokens. If a home has other members it stays, and your name is removed from its wall history. Deleting your account cancels a plan you pay for on our website, and keeps the account if that cancellation fails. A subscription from the App Store or Google Play has to be cancelled there first. Payment records held by Stripe are not deleted by this. Encrypted server backups are retained for up to 30 days and then deleted automatically, so deleted data disappears from backups within 30 days. Billing records are kept as long as bookkeeping law requires.

Your rights

You can access, correct, export (Settings → Download my data) and delete (Settings → Danger zone) your data yourself, or email us to exercise any GDPR right: access, rectification, erasure, restriction, portability or objection. You may also complain to a data protection authority; for us that is Datatilsynet (Norway), but you can contact the authority in your own country. The service is not directed at children under 13.

Cookies and analytics

We set the session cookie required to keep you signed in. We set no advertising cookies.

We run our own product analytics (OpenPanel, self-hosted on our own server at analytics.baars.design), so no analytics provider receives your data. In your browser it records the pages you view, links you follow to other sites and clicks on some buttons, along with events such as sending a painting or starting a plan. It sets no cookie and stores no identifier in your browser: repeat visits are recognised by a short-lived pseudonymous ID computed on our server. When you are signed in, your activity is linked to your account: we record your account ID, email address and name with it. Visitors who are not signed in are recorded without a profile. We use this to understand how The Framer is used and where visitors come from. We do not share it with anyone else and we do not use it for advertising. To object, email [email protected] and we will stop analytics for you and remove your profile.

Contact

Privacy questions or data requests: [email protected] · BAARS DESIGN, org. nr. 938 054 037 (Norway) · baars.design.