Privacy policy

Who we are

Framewell is the independent picture-library service at mypicframe.com. It is not part of Linden Research, Inc. or Second Life®. The operator of this website is the data controller for personal data processed here.

Privacy requests: email the site operator at privacy@mypicframe.com.

What we collect

• Account. Email, password (stored as a hash, never in plain text), display name, and the username friends use to find you.
• Library. Folders and pictures you upload (resized so the longest side is 2048 pixels), share links, publish-to-Second-Life choices, and frame slot counts.
• Second Life service. One-time keys, avatar UUID if you bind a frame, in-world payment records (Linden dollar amount and avatar), and marketplace key status. We do not receive your Second Life password or credit card.
• Technical. A signed-in session cookie, server and access logs (which may include IP address, browser, and time), and a local folder-view preference in this browser.

We do not run advertising networks, sale-of-data brokers, or third-party analytics pixels.

Why we use it (legal bases)

• Contract. To create your account from a one-time key, store your pictures, share what you choose, and drive the in-world frame.
• Legitimate interests. Security, abuse prevention, and keeping the service running (rate limits, logs).
• Consent. Optional Google Fonts, only if you click Accept all. You can choose Necessary only.
• Legal obligation. If we must keep a record to answer a lawful request.

Where it is stored

The site and picture files are hosted on a virtual server in the United States. If you are in the EEA, UK, or Switzerland, this is a transfer outside those regions. We use HTTPS, locked-down session cookies, and access controls. We do not sell your pictures or account list.

How long we keep it

Account and library data stay until you delete the items or we close the account. Server logs are kept only as long as needed for security and operations (typically weeks, not years). Session cookies expire when the session ends or you sign out.

Sharing

Pictures are shown to people you share with, or to a Second Life viewer when your frame requests a signed image. Hosting and email infrastructure may process data as our processors, only to run this service. We do not sell personal information and we do not share it for cross-context behavioral advertising.

Your rights

If GDPR, UK GDPR, or similar law applies, you may request access, correction, deletion, restriction, objection, or a portable copy of your account data. You may withdraw font consent at any time by choosing Necessary only on the cookie bar (clear the site data or visit the cookie policy). You may complain to your local supervisory authority.

If a US state privacy law applies (including California), you may request to know, delete, or correct personal information. We do not sell or share personal information as those statutes define those terms. We will not discriminate for exercising these rights. Authorized agents may write to the address above.

Children

Framewell is not directed at children under 16. Do not create an account for a child under 13. Second Life has its own age rules; you must also follow those.

Security

Passwords are hashed. Sessions use a host-only secure cookie. Picture URLs for Second Life are signed and time-limited. No method of transmission is perfectly secure; do not upload pictures you cannot risk exposing if a system is abused.