Privacy policy

Version 2026-10-29 · In force from 29 October 2026

In short: your recordings are processed in your browser. With Pro, your projects' recordings are stored privately in your account, in the EU, so they open on any computer, and nobody looks at them. With an account we keep your email, how you sign in, your projects and your subscription. Payments are handled by Stripe. We count visits without cookies, and use no advertising or tracking cookies.

Who is responsible

The controller is Krystof Jezek, sole trader, IČO 08424683, Pod altánem 2406/48, 100 00 Praha, Czech Republic, hello@motionmockups.com.

What your browser keeps

The recordings and images you put into a mockup are processed in your browser; what Pro stores in your account is under your recordings below. Your edit, a copy of your recording so a reload doesn't lose it (one for each of your projects too), and project changes not yet saved to your account are kept in your browser's storage, and so are the files of an export while it is being made. Signing in keeps a session token there too, and asking for a sign-in code keeps your email address there for an hour, so the code can be entered after a reload. With an account, the browser also remembers which projects you had open and which notices you have already seen. A signed-in account's recording copies stay in this browser after you sign out, until that account signs in here again or is deleted in this browser. Nothing in browser storage is used for advertising or tracking. You can clear it in your browser's settings at any time.

What we process, and why

• Your account — email address; your name and picture if you sign in with Google; how you sign in; when you created the account, and which version of the Terms you accepted and when. To provide the account and the subscription (contract).
• Your projects — with an account: each project's name, device and edit (scenes, trims, fitting, effects and output settings), and the recording's file name, type, size, dimensions and length. The edit never holds the recording or any frame of it. To keep your projects on every computer you sign in on (contract). Kept until you delete the project or the account.
• Your recordings — only while you have Pro: the file of each project's recording or image, with its name, type and size, and a small picture of it for the project's card in My Projects. They are uploaded from your browser and stored privately with Cloudflare in the EU, encrypted at rest, and can be read only through short-lived links issued to your signed-in account. To open your projects with their recordings on every computer you sign in on (contract). Nobody looks at them: they are not viewed, analysed, shared or used to train AI models. We access a file only when you ask us to (for support), or when the law or a valid notice of illegal content requires it. A recording can show other people's personal data; you decide what you upload (see the Terms). If you use Pro for a business and your recordings hold other people's personal data, we store it on your behalf as your processor, under the Data processing agreement, which applies automatically and lists who helps us store it.
• Your subscription — your Stripe customer reference, plan, price, status and renewal date. To give Pro to the right account (contract). When you first go to checkout we give Stripe your email address and account reference, so the payment reaches the right account. Card and billing details go to Stripe, not to us.
• Downloads of scenes — when a Pro account loads full-quality scenes: the account, the scene, the time and the IP address. To spot misuse of accounts and protect the scenes (legitimate interest). Kept for 90 days, then deleted automatically; the same details also pass through our hosting provider's logs, which expire on their own.
• Sign-in emails — your address and the one-time code, to send it (contract). The email's typeface comes from our own site; no one else is contacted when your mail app shows it.
• Subscription confirmation — when you subscribe: your email address, plan, price and renewal date, to send you a confirmation of the contract with the Terms attached (contract, and the consumer law that requires the confirmation).
• Bot check — the sign-in window runs Cloudflare Turnstile, which checks that a person is asking, using your IP address and details of your browser. To stop automated abuse of sign-in (legitimate interest).
• Sign-in with Google — nothing is loaded from Google until you choose Continue with Google. Then Google's sign-in loads, which connects your browser to Google, and Google tells us your email address, name and picture. To sign you in the way you chose (contract).
• Technical logs — our hosting and network providers log requests (IP address, browser, time) to run and secure the service (legitimate interest), and keep them for a short time under their own policies.
• Usage statistics — the pages visited, the site that sent you, your country, device type, operating system and browser, and actions in the editor such as adding scenes, adding a recording, exporting and signing in, described only by labels like the device or export size, never your files, their names or your email. Counted with Vercel Web Analytics, which uses no cookies and stores nothing on your device; visits are told apart by a hash of the request that is discarded after 24 hours, so no profile of you is built. To understand how the product is used and improve it (legitimate interest).
• Messages to us — what you write to hello@motionmockups.com, to answer you.

Who processes it for us

• Supabase — accounts and the database, hosted in the EU (Ireland).
• Vercel — hosting of the website and its server functions, which run in the United States, and the usage statistics.
• Cloudflare — domain, network protection, the bot check on sign-in, storage of the scenes and, in the EU, of Pro accounts' recordings, and forwarding of email sent to us.
• Resend — delivery of sign-in emails and subscription confirmations.
• Google — sign-in with Google, when you choose it; and the mailbox that receives our email.

Stripe and Link sell the subscription to you as merchant of record. For the payment they act as an independent controller under their own privacy policies; we receive your customer reference, plan and payment status, never your card.

Vercel, Google, Resend, Cloudflare and Stripe are based in the United States, and Vercel runs our server functions there; your stored recordings and our database stay in the EU. Transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses; write to us for a copy of the safeguards.

How long we keep it

Account, project and subscription data: until you delete your account (a project also goes when you delete it). Delete the account in the account dialog; your sign-in, profile, projects and subscription record are erased at once. Stored recordings: until you remove one from its project, or delete the project or your account, and at most 30 days after your Pro subscription ends; the file and its picture are then deleted from storage within two days. An upload that never finishes is deleted within two days. Deleting your account does not delete what Stripe holds as its own controller: your customer record, and invoices, which it keeps for as long as tax law requires. Scene download records then lose the link to your account but keep the IP address until their 90 days end, and providers' technical logs expire on their own. Scene download records: 90 days. Usage statistics: anonymous, kept by Vercel under its own policy; we see the last 12 months. Emails to us: as long as needed to deal with them.

Your rights

You can ask for access to your data, a copy in a portable form, correction, erasure or restriction, and you can object to processing based on legitimate interest. Write to hello@motionmockups.com; we answer within one month. You can delete your account, with its projects and stored recordings, yourself in the account dialog. You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz) or to the authority where you live.

What you have to give us

Nothing, to use the editor. An account needs an email address or a Google account, and Pro needs a payment through Link; without them we cannot provide the account or Pro. We make no decisions about you based solely on automated processing that have legal or similarly significant effects.

Cookies

We set no advertising or analytics cookies, and usage statistics store nothing on your device. The browser storage described above is needed for the editor and for signing in, or remembers your own choices, such as which projects you had open. If you sign in with Google, Google's own sign-in window is subject to Google's policies.

Age

The service is for people aged 18 and over.

Changes

If we change this policy in a way that matters, we tell you by email or in the app before it takes effect.