Privacy Policy
Last updated November 8, 2026
This policy explains what SocialMock (“we”) collects, why, and the choices you have. The short version: what you type into a mock-up stays on your device; if you subscribe, we keep the minimum needed to know you have paid.
What stays on your device
The generators run in your browser. The names, messages, photos and other content you enter are used to draw the image locally and are not uploaded to our servers. So you can pick up where you left off, the editor saves your current draft in your browser’s local storage. Use the Reset button or clear this site’s data in your browser to remove it.
What we collect if you sign in
You only need an account to remove the watermark. Sign-in is through Google, handled by our authentication provider, Supabase. We receive your Google account email address, a user ID, and basic profile details Google shares (such as your name and picture). We use the email and user ID to link your account to your subscription and to contact you about billing or important changes. We do not get your Google password, and we do not access your Gmail, contacts or files.
What we collect if you subscribe
Payments are handled by Stripe. Stripe collects your card and billing details under its own privacy policy; we never see your full card number. From Stripe we keep a customer ID, a subscription ID, the plan, its status (for example active or cancelled) and the renewal date. We use these only to unlock watermark-free downloads, to show you your subscription, and to keep the financial records the law requires.
Logs and cookies
Our hosting provider (Vercel) records standard request logs, such as IP address, browser type and the page requested, for security and reliability. Signing in stores a session token in your browser’s local storage so you stay signed in. We do not use advertising cookies and we do not sell or rent personal data.
Who processes data for us
- Supabase: sign-in and the account database (email, user ID, subscription status).
- Stripe: payments, invoices and the subscription management page.
- Google: the sign-in screen you use to log in.
- Vercel: website hosting and server functions.
These providers may process data in the United States and other countries, under their own safeguards for international transfers.
How long we keep it
Account data is kept while your account exists. If you ask us to delete your account, we remove your email and account records within 30 days, except billing records we must keep for tax and accounting (usually several years), which Stripe and we retain only for that purpose.
Your rights
You can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it. Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have further rights, including complaining to your local data-protection authority. To make a request, contact us at francis.f.wang@gmail.com from the email address on your account.
Children
Accounts and subscriptions are not intended for anyone under 16, and we do not knowingly collect their personal data.
Changes
If we change this policy, we will update the date above, and email subscribers about significant changes.