Privacy

Last updated November 2, 2026

jellypad is a browser-based tool for making visual effects. It's built to collect as little as it can. This page says what it does collect, why, and who else sees it. Questions go to support@jellypad.studio.

Without an account

You don't need an account to use jellypad. While you're signed out, your design lives in the page's address, after the #, which browsers never send to a server, and images you add stay in your browser's storage on your device. We never receive either one unless you share a link, below.

The camera source and motion tracking run entirely in your browser. Camera frames never leave your device. The tracking models are downloaded from Google and jsDelivr, as any web page loads files.

When you sign in

Signing in uses your Google account. We ask Google only for your name, email address and profile picture, and keep them with an account ID. We don't see your Google password and get no access to your Gmail, Drive or anything else.

We set one cookie to keep you signed in. It holds a random token, which we store only in scrambled (hashed) form, and it expires after 30 days without a visit. Signing out deletes it.

Designs you save

If you save designs to your account, we store them, and the images in them, on our servers so you can open them on any device. They're private to your account unless you share a link to one. When you delete a design, we delete it and its images.

Links you share

When you share a link, we store a copy of the design as it is then, the images in it, and a picture of its frame, so the link works for anyone you send it to and shows a preview in chats. Anyone with the link can open it, so share it only with people you mean to. If you're signed in, the copy is tied to your account. To stop people from flooding the service, we also keep a scrambled (hashed) form of your account ID or IP address with it, and clear that after a day. Shared copies are kept until you ask us to delete them at support@jellypad.studio.

Payments

If you subscribe, Stripe handles the payment. Your card details go straight to Stripe and never reach us. We keep only what we need to know your subscription is active, such as Stripe's ID for you and the plan's status.

Usage analytics

We use PostHog to learn which features get used and how fast the app runs. It records page views, a small set of actions (for example, adding an effect or exporting), how quickly pages load, and the browser, device and rough location your connection suggests. It never records the contents of your designs or images, keystrokes or screen recordings. It uses your browser's local storage instead of cookies. Once you sign in, these events are tied to your account ID.

Who else sees data

We don't sell or rent your information, and we don't show ads. These services handle data for us, only to run jellypad:

We'd share information otherwise only if the law requires it.

Security

Everything travels over HTTPS. Only the app's servers can reach the database, sign-in tokens are stored only in hashed form, and access to the systems behind jellypad is limited to the people who run it. No system is perfectly secure, but we'll tell you promptly if something happens to your data.

Keeping and deleting data

We keep your account and saved designs until you delete them or ask us to. To delete your account and everything in it, email support@jellypad.studio from the address you sign in with, and it's done within 30 days. Copies in nightly database backups are gone within 30 days after that. You can also ask for a copy of what we hold about you. Payment records are kept as long as tax law requires.

Children

jellypad isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If this policy changes, we'll update the date at the top, and tell signed-in people about anything significant before it takes effect.