Privacy Policy

This policy explains what we collect, why, and who we share it with for the AE2CSS Exporter service and the website at https://ae2css.com.

1. What we collect

• Account data: your email address (used for magic-link sign-in, Google sign-in, and product communication).
• Device/seat data: a generated machine identifier, app version, and last-seen timestamps — to bind your license to your installs and enforce seat limits.
• Usage data: counts and timestamps of key actions (sign-in, export, license revalidation) — to enforce quotas, operate the Service, and improve it. We log audit events tied to your account.
• Billing data (paid plans): handled by Stripe. We store a Stripe customer/subscription identifier and subscription status/period — not your full card number.
• Technical data: standard request/server logs (IP, user agent, timestamps) from our hosting provider.

What we do NOT collect: we do not upload or store your After Effects projects or the HTML/CSS you export. Analysis and export happen on your machine; only the account/usage metadata above reaches our servers.

2. Why we use it (legal bases)

To provide and secure the Service, authenticate you, enforce plan limits, process payments, prevent abuse/fraud, comply with law, and communicate about the product. Where required, our bases are performance of a contract, legitimate interests (security, anti-abuse, product improvement), consent (where applicable), and legal obligation.

3. Processors we share data with

We use these sub-processors to run the Service; they process data on our behalf:

• Vercel — website/API hosting and logs.
• Neon — database (accounts, usage, audit).
• Resend — account email: magic-link sign-in, and occasional product/welcome messages you can unsubscribe from at any time.
• Google — optional "Sign in with Google" authentication (we receive your verified email and basic profile).
• Google Ads — advertising measurement on this website, only if you accept cookies (see section 4).
• Stripe — payment processing and subscription management.

We do not sell your personal data. We may disclose data if required by law or to protect rights and safety.

4. Cookies and similar technologies

We keep this deliberately small. There are two kinds of storage on this site:

• Strictly necessary (always on). A sign-in session cookie that keeps you logged in, and browser localStorage that remembers your cookie choice. These are required for the site to work, so they do not need consent and cannot be switched off.
• Advertising (off until you accept). If you accept, Google Ads sets cookies such as _gcl_* and _ga so we can see which ad campaigns lead to sign-ups. They typically last up to 90 days for _gcl_* and up to 2 years for _ga.

We do not run advertising or analytics cookies before you accept them. Until you choose, Google Consent Mode holds the tag in a denied state and no advertising cookie is written. Declining costs you nothing — every part of the site works either way.

You can change your mind at any time via the Cookies link in the footer of any page. Withdrawing consent stops further collection and clears the advertising cookies already set in your browser.

The AE2CSS extension inside After Effects does not use cookies at all.

5. Retention

We keep account and usage data while your account is active and as needed for legal, security, and accounting purposes, then delete or anonymize it. Audit logs are retained for a limited period for security.

6. Your rights

Depending on your location you may have rights to access, correct, delete, export, or restrict processing of your data, and to object or withdraw consent. To exercise them, email hello@ae2css.com or use our contact form. You can also delete your account, which removes your account data subject to limited legal/accounting retention.

7. Security

We use industry-standard measures (encrypted transport, hashed one-time tokens, scoped secrets). No system is perfectly secure; use a secure email account, since email access controls sign-in.

8. International transfers

Our processors may store/process data in the United States and the European Union. Where required, transfers rely on appropriate safeguards (e.g. standard contractual clauses).

9. Children

The Service is not directed to children under 16 and we don't knowingly collect their data.

10. Changes

We may update this policy; material changes will be announced. Continued use means you accept the updated policy.

11. Contact

Questions or requests: our contact form.