Privacy Policy

Last updated: October 19, 2026

Framerly is a Framer plugin operated by Domino Effect. This policy explains what we collect when you use the plugin, why we collect it, where it lives, who we share it with, and how to remove it.

Framerly is free. We aim to collect as little as possible. Scans run entirely on your device: nothing about your Framer projects, your findings, or your scans is sent to us.

Who we are

Domino Effect is the data controller. Contact: rodrigo@dominoeffect.co.

What we collect

Account

When you sign in, we store the email address and display name that your identity provider returns. If you sign in with Google, that includes your Google account id and avatar URL. If you sign in with a magic link, only your email is stored.

Versions of the plugin released before July 2026 also recorded a Framer-assigned account identifier. Current versions do not collect it. Identifiers already stored are handled as described under Retention.

Past purchases

Framerly no longer sells plans. If you bought one before October 2026, we keep the record of it (plan, dates, and the Polar customer, subscription, and order ids) until you delete your account.

Support

The plugin's Support links open Buy Me a Coffee, a separate service, in your browser. Nothing is sent from the plugin when you click one. If you choose to give, Buy Me a Coffee handles the payment under its own privacy policy.

Scans

Scans run inside the plugin on your device, and we receive nothing about them: no project names or ids, no findings, no counts. Your most recent scan of each project is kept in the plugin's local storage on your device so you can reopen it without scanning again. It never leaves your device, and you can remove it by clearing the plugin's site data.

Versions of the plugin released before October 2026 logged when you scanned and, on the free plan, sent a one-way code made from the project id to count projects. We no longer accept either, and the project codes we had stored have been erased.

Feedback you send

If you report an issue with a finding, we store the name of the rule (for example, "low contrast text") and the note you write. If you send general feedback, we store its category, your message, and the plugin version. Both are linked to your account (your user id and email), and both are sent only when you press Send.

Affiliate program

Framerly no longer runs an affiliate program, and any affiliate data has been deleted.

What we do not collect

• We do not collect analytics, telemetry, or behavioral tracking inside the plugin.
• We do not set marketing or advertising cookies on the auth site.
• We do not log your access or refresh tokens, and we do not log Polar order receipts.
• We do not read or store the content of Framer projects you have not scanned.

How we use your data

• To sign you in and keep your session alive.
• To read and act on feedback you send.
• To respond when you contact support.

Where it lives

Account, subscription, and feedback data is stored in a Supabase project hosted in the United States. Row-level security restricts every user to their own rows. All writes go through our own Supabase Edge Functions, which verify the user's access token on every request.

The auth site is a static page hosted on Cloudflare Pages. The page only reads the device code from the URL, completes your sign-in with Supabase, and forwards the resulting tokens to our Edge Function.

Who we share with

• Supabase: authentication, database, and serverless functions.
• Google: only if you sign in with Google OAuth. Google receives whatever sign-in metadata it always does; we only get your email, name, avatar, and Google account id back.
• Polar: our merchant of record for plans sold before October 2026. Polar collected payment details directly; we never saw your card.
• Buy Me a Coffee: only if you click a Support link and choose to give. We share nothing with them; you visit their site directly.
• Cloudflare: static hosting for the auth site.
• Resend: transactional email (sign-in links). Resend receives your email address and the message body for the duration needed to deliver it.

We do not sell personal data. We do not share personal data with advertisers.

Retention

Account, subscription, and feedback rows stay until you delete your account. Scan data is never stored by us; the copy on your device stays until you clear the plugin's site data.

The anti-fraud Framer account identifier described above is the sole exception to the "removed on account deletion" rule. It is retained for up to 12 months after deletion and then purged on a scheduled job.

Your rights

You have the right to access, correct, export, and delete your data, and to object to or restrict processing. You can exercise these rights at any time by emailing rodrigo@dominoeffect.co.

If you are in the EEA, UK, or Switzerland, our legal basis is: contract for account and subscription data, and legitimate interest for feedback you choose to send. You can complain to your local data protection authority if you believe we've mishandled your data.

If you are in California, you have additional rights under the CCPA including the right to know, delete, and not be discriminated against for exercising those rights. We do not sell personal information.

Deleting your account

Open the plugin, click the account menu, and choose Delete account. You'll be asked to type DELETE to confirm. Once confirmed, the request calls our /user-delete Edge Function, which removes your auth.users row. Every table that references you cascades on delete, so the subscription and feedback rows are removed in the same transaction. The data is unrecoverable after that point.

Changes to this policy

If we change this policy materially, we'll update the "Last updated" date above. If you have a live subscription, we'll notify you by email before the change takes effect.

Contact

Questions or requests: rodrigo@dominoeffect.co.