Privacy Policy

• Account information — the email address you use to sign in.
• Your content — the designs you upload and the mockups you generate, stored only to provide and operate the Service.
• Messages you send us — when you use our contact form or email us, we receive your name, email address, the category you select, your message, and basic metadata such as your IP address and the time of submission.
• Technical data — limited server logs and your IP address, used to operate the Service, prevent abuse, and apply rate limits.
• Usage and analytics data — where you consent, we and our analytics provider (Google) collect limited information about how you interact with the Service, such as pages viewed and basic device and approximate location data, to measure and improve the Service. This is disabled by default and only collected after you accept analytics cookies.
• Payment information — handled by Polar, our Merchant of Record. We do not receive or store your full credit card or payment details; we receive only the limited verification information necessary to know your subscription status.

• To provide, operate, and improve the Service.
• To authenticate you with one-time sign-in links sent to your email.
• To send essential service emails, such as sign-in links and batch-completion notifications.
• To respond to your inquiries and provide user support.
• To detect, prevent, and address abuse, fraud, spam, and security issues.
• To process subscriptions and payments through Polar.
• To measure and analyze how the Service is used, where you have given your consent.

Where the General Data Protection Regulation (GDPR) applies, we process your information to perform our contract with you (to provide the Service), for our legitimate interests (to operate, secure, and improve the Service), and based on your consent where explicitly requested.

We share information with trusted third-party service providers that help us run and secure the Service:

• Polar — payments and subscription billing (acting as the Merchant of Record).
• Infrastructure providers — including cloud hosting, database management, transactional email delivery, and distributed file storage services (such as Vercel, Fly.io, Cloudflare, and Neon).
• Google — analytics and tag management (Google Tag Manager), used only where you have given your consent, to measure and improve the Service.

These providers process your information strictly on our behalf and only as needed to perform their specific functions to maintain the Service. We do not sell or share your personal information with third parties for marketing or advertising purposes.

We keep your account information while your account is active. Uploaded designs and generated files are available for download for a limited time and are then automatically deleted from our storage providers. Messages you send us via support channels are retained as needed to handle your request and maintain reasonable business records. You can delete your account and data at any time from your account settings; deletion is permanent and also cancels any active subscription.

Mockraft is operated as a global online service, and our service providers may store and process information in the United States and other countries. Where required by applicable law, we rely on appropriate safeguards and data processing agreements for such cross-border transfers.

Depending on where you live — including under Japan's Act on the Protection of Personal Information (APPI), the GDPR, and the CCPA/CPRA — you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, please reach us through our contact page. As noted above, we do not sell your personal information or share it for cross-context behavioral advertising.

We use essential cookies and web storage technologies (such as local storage) that are strictly necessary to securely sign you in, maintain your session, and keep the Service functioning. These are always active and do not require your consent.

With your consent, we also use optional analytics cookies and similar technologies, provided through Google (Google Tag Manager), to understand how the Service is used and improve it. Analytics are disabled by default and load only after you accept them. We do not use any advertising or cross-site tracking cookies. You can accept or decline analytics at any time using the “Cookie preferences” link in the footer.

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please reach us through our contact page.

We use reasonable technical and organizational measures to protect your information against unauthorized access or loss. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Any disputes, claims, or proceedings arising out of or relating to this Privacy Policy or our data practices shall be governed by the laws of Japan and shall be subject to the exclusive jurisdiction of the Tokyo District Court of Japan, as set forth in the Terms of Service.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page.

Mockraftis the data controller for the Service and is operated by an individual operator based in Japan. The operator's name and address are available upon request through our contact page. For privacy-related questions or to exercise your rights, please reach us through our contact page.