Privacy Policy

ShipMock is built to need as little of your data as possible. This page lists everything we do collect.

Without an account

• Screenshots, logos, fonts, text and project files are rendered in your browser and never uploaded.
• Autosaved projects and brand kits are kept in your browser's IndexedDB.
• Your Pro license is kept in your browser's local storage and checked offline; once a day the app asks our server whether it is still active.

With an account (optional)

• Your email address, to send sign-in links and link your purchases.
• Projects and brand kits you choose to save to your account, including their images and fonts, stored on our servers so you can open them on other computers. Nothing is uploaded unless you save it to your account.
• One cookie, sm_session, that keeps you signed in. It is strictly necessary and is not used for tracking.

Deleting a project from your account removes it from our servers. To delete your whole account and everything in it, email us.

Purchases

Checkout is run by Paddle.com, our Merchant of Record. Paddle collects your name, email, payment and billing details under Paddle's privacy policy. We receive your email address and purchase record from Paddle, and use them only to run your plan, provide support and handle refunds. The Paddle checkout script is loaded only when you open checkout.

Analytics and cookies

We do not use advertising trackers, and set no cookies apart from the sign-in cookie above. We count page visits and product events (such as "export completed" or "checkout opened") with Umami, running on our own server. Umami sets no cookies, does not identify you, and stores no IP addresses; nothing is shared with third parties.

Listing Score

The Listing Score tool asks Apple's public App Store API and image servers for the app you enter, directly from your browser. For Google Play apps, our server fetches the public store page for you, because Google does not allow browsers to read it directly. We do not store the apps you score.

AI copy (ShipMock Cloud)

When you ask for headline suggestions or translations, we send the app name and description you entered and the caption text of your screens to Anthropic, which runs the Claude model that writes them. Your screenshots and images are not sent. Anthropic processes the request under its commercial terms and does not train models on it. We keep a record of the credits each request used, not the text.

Direct upload (ShipMock Cloud)

When you upload to App Store Connect or Google Play, the images and the API key or service account key you choose travel through our server to Apple or Google, because their APIs do not accept uploads from a browser. We use the key only for that upload and do not store it, the images, or anything the stores return. The bundle ID and package name are saved in your project, on your device.

Client review links (ShipMock Cloud)

A review link shows the project version saved to your account to anyone who has the link, until you turn it off or replace it. We store only a hash of the link. Reviewers need no account: we store the name they type and their comments, which you, the project owner, can resolve or delete. Review pages are not indexed by search engines.

Figma import

Importing from Figma sends your Figma access token and the file link through our server to Figma, which returns the frames and renders of their layers. We use the token for that import only and do not store it or the designs; the imported screens live in your project on your device.

Template marketplace

When you publish a pack, we store its design, its images and preview renders, and show the previews with the name you chose to be credited under (never your email). Buyers of a pack get its full design. We record each sale and your share of it to pay you. When you buy a pack, the designer sees sales counts, not who bought.

Teams

A team owner can invite people by email; we send them one invitation email. Team members see each other's email addresses, the team's projects and the brand kits shared with the team. Leaving or being removed from a team ends that access; projects you created stay with the team until its owner deletes the team, when they return to you.

Hosting

The site is hosted on Netlify, which processes standard request logs (such as IP address and user agent) to serve and protect the site.

Your rights

To see, correct or delete the purchase data we hold about you, email support@shipmock.com.