Privacy Notice

1. At a glance

Your artwork and background files are processed locally on your device. They are not uploaded to SPINESPINESPINE or stored on its servers.

SPINESPINESPINE does not provide user accounts, cloud project storage, advertising or cross-site profiling.

The site uses cookieless audience and performance analytics. These tools do not receive the contents of your artwork or exported files.

2. Data controller

The data controller for this website under Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), is:

Alberto Guglielmi
Email: contact@spinespinespine.tools

You may use this address for any question about this notice or the processing of personal data.

3. Files and project data stored on your device

When you upload cover artwork, poster artwork, an image background or a video background, the file is read and processed by your browser.

SPINESPINESPINE uses the following browser storage:

• book-mockup-assets (IndexedDB): stores the image and video files used by the project.
• book-mockup-project-v1 (local storage): stores project settings such as dimensions, materials, binding, artwork references, background, camera, motion and export settings.
• book-mockup-project-v1-saved (local storage): records that you selected the local save function so that the project can be restored after reloading the page.
• book-mockup-project-v1-session (session storage): keeps the current project available while you navigate within this browser tab, for example after visiting this notice and returning to the editor. It is cleared when the tab is closed.

Project settings may be written locally while you work, and stay available for as long as the browser tab remains open. Selecting Save keeps the project available after the tab is closed or the browser is restarted.

These local stores are used only to operate the editor and preserve your project on your device. They are not used for advertising, analytics or profiling, and their contents are not transmitted to SPINESPINESPINE.

Rendering and export also take place on your device. MP4, WebM, GIF, PNG sequences and project files are generated locally and saved through your browser.

Your local project data remains on the device until it is removed by the application, replaced by another project, or deleted through your browser settings. Clearing the site data for SPINESPINESPINE removes the locally stored project and files. SPINESPINESPINE cannot recover them.

4. Audience and performance measurement

SPINESPINESPINE uses Umami Cloud, Vercel Web Analytics and Vercel Speed Insights to understand general usage, detect technical problems and improve performance.

No advertising cookies or cross-site tracking cookies are used. The analytics tools do not receive uploaded files, artwork content, exported files or payment information.

4.1 Umami Cloud

Umami Cloud is provided by Umami Software, Inc.

Umami may record:

• page views;
• the page title and URL;
• the referring page or website;
• browser, operating system and device information;
• browser language;
• approximate country;
• session and visit information generated without storing the raw IP address.

SPINESPINESPINE also sends a limited set of custom product events to Umami:

• creation of a project, together with the product type;
• application of artwork, together with the product type and selected surface;
• start, completion, cancellation or failure of an export;
• export format, width, height and frame rate;
• final output size when an export is completed.

SPINESPINESPINE does not send Umami file names, artwork contents, video contents, exported files, email addresses or a distinct user ID.

Umami session replay and heatmaps are not enabled for SPINESPINESPINE.

The Umami tracker is configured to respect the browser’s Do Not Track setting. When Do Not Track is enabled, Umami is instructed not to record the visit.

4.2 Vercel Web Analytics

Vercel Web Analytics is provided by Vercel Inc. It records anonymous page-view and traffic information such as the visited route, referrer, approximate location, browser, operating system and device type.

It does not use cookies. Vercel uses a temporary hash generated from the incoming request to distinguish visits. That identifier is reset daily and is not intended to identify a person or track a visitor across different websites.

4.3 Vercel Speed Insights

Vercel Speed Insights is provided by Vercel Inc. It records website-performance information, including Core Web Vitals and related technical details such as route, browser, operating system, device type, network category and approximate country.

Vercel states that Speed Insights data points are not tied to an individual visitor or IP address and cannot be used to reconstruct a person’s browsing session.

4.4 Hosting and security logs

Vercel hosts the website. Like other hosting providers, it may process connection and request information, including an IP address, request time, requested URL and technical headers, where necessary to deliver the site, maintain security, prevent abuse and diagnose faults.

5. Purposes and legal basis

Where analytics, performance or security information qualifies as personal data, it is processed on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR.

Those interests are:

• understanding how the tool is used at an aggregate level;
• improving reliability and performance;
• identifying failed exports and technical faults;
• protecting the website and its infrastructure from abuse.

The project information stored in your browser is used to provide the editing and local-save functions that you request. SPINESPINESPINE does not receive that project information.

You may object at any time to processing based on legitimate interests by writing to contact@spinespinespine.tools.

6. Cookies and browser storage

SPINESPINESPINE does not set advertising or profiling cookies.

The browser storage described in section 3 is used for the operation and local preservation of your own project. It is not an analytics identifier.

Umami Cloud, Vercel Web Analytics and Vercel Speed Insights are configured without analytics cookies or persistent analytics identifiers in local storage or session storage.

If the technologies or purposes used by SPINESPINESPINE change, this notice and the site’s consent mechanism will be reviewed before the new processing is introduced.

7. Service providers and international transfers

The following providers receive limited technical data for the purposes described above:

• Umami Software, Inc. — audience analytics and product events;
• Vercel Inc. — website hosting, traffic analytics and performance measurement.

These providers may process data in the European Economic Area, the United States or other countries in which they or their subprocessors operate.

Where required, international transfers are protected through an applicable adequacy decision, participation in a recognised data-transfer framework, Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism described in the provider’s contractual and privacy documentation.

8. Retention

Local project files and settings remain in the browser until they are removed, replaced or cleared by the user, as explained in section 3.

Umami analytics records are kept for no longer than 12 months, after which they are deleted or reset unless a shorter period is required.

Vercel Web Analytics and Speed Insights data remain available only for the reporting window provided by the active Vercel plan. Vercel’s temporary Web Analytics visitor identifier is discarded after 24 hours.

Technical and security logs controlled by service providers are retained according to their applicable policies and only for as long as necessary for service delivery, security, fraud prevention and legal compliance.

9. Your rights

Under the GDPR, and where the relevant conditions apply, you may request:

• access to your personal data;
• correction of inaccurate data;
• deletion of data;
• restriction of processing;
• objection to processing based on legitimate interests;
• data portability where the processing is based on consent or contract and carried out by automated means.

To exercise a right, write to contact@spinespinespine.tools.

Because the analytics systems do not contain a direct identifier such as your name or email address, it may be impossible to locate data relating specifically to you without collecting additional information. SPINESPINESPINE will not attempt to re-identify anonymous or pseudonymous analytics data solely to respond to a request.

You may enable Do Not Track to stop Umami from recording your visit. Browser tracking-protection features and content blockers may also prevent analytics scripts from loading.

You also have the right to lodge a complaint with a supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali. You may also contact the authority in the EU or EEA country where you live, work or believe an infringement occurred.

10. Security

SPINESPINESPINE limits the information transmitted to analytics providers and does not operate a server-side database of uploaded artwork or saved projects.

No internet service can be guaranteed to be completely secure. You should keep your own copies of important artwork and exports and should not rely on browser storage as a permanent backup.

11. Changes to this notice

This notice may be updated when the service, its providers or the applicable requirements change. The “Last updated” date at the top of the page will be revised whenever a material change is made.

SPINESPINESPINE does not maintain a user mailing list, so changes are announced by publishing the updated notice on the website.

See also the Terms of Use and the Legal Notice.