Policies

Privacy policy

Your privacy is important to us. This policy describes how we collect, use, and protect your data.

Introduction

Design Owls ("we," "our," or "us") operates Freebird, a UX audit tool available as a website and Chrome extension. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Information we collect

When you use Freebird, we may collect the following types of information:

Account information

When you create an account, we collect:

  • Email address (required for account creation)
  • Name and display name (optional)
  • Company name (optional, for PDF exports)
  • Reviewer name (optional, for PDF exports, defaults to your full name)
  • Profile picture or avatar (optional)

Content and usage data

We store the following data associated with your account:

  • Projects you create and manage (including project name, description, and URL)
  • Annotations you create, including three types: Issues (UX problems with severity levels), Strengths (positive feedback), and Bugs (technical issues with reproduction steps)
  • Element information captured during annotation (HTML tag, text content, CSS styles, attributes) for annotation targeting and Smart Fill analysis
  • Screenshots automatically captured with each annotation
  • File attachments (up to 3 per annotation, JPEG/PNG images only, maximum 5MB per file)
  • Page URLs where annotations are created
  • Extension settings and preferences
  • Device information (browser, operating system, screen size, viewport) collected when generating PDF exports for inclusion in reports

Authentication data

We offer two authentication methods: Google OAuth and passwordless login via email (login link). When you sign up or log in using Google OAuth, we receive basic profile information from Google (name, email address, profile picture) as permitted by your Google account settings. We do not access other information from your Google account. For passwordless login, we only collect your email address to send you a secure login link. We do not store passwords.

How we use your information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate your account and manage your access
  • Store and synchronise your projects and annotations across devices
  • Provide automated design analysis suggestions through Smart Fill (performed locally, no external data transmission)
  • Generate PDF reports with device information for context
  • Enable project sharing via shareable links (view-only access, no signup required)
  • Respond to your inquiries and provide customer support
  • Send you service-related communications (account updates, security alerts)
  • Comply with legal obligations and enforce our terms of service

Data storage and security

For authenticated users, data is stored in Supabase (cloud database and storage). For trial users, data is stored locally in your browser using Chrome Storage and IndexedDB. Screenshots and attachments are stored in private Supabase Storage buckets with Row Level Security (RLS) policies ensuring only you can access your files. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

Third-party services

We use the following third-party services:

  • Supabase: For database storage, authentication, and file storage. Your data is processed in accordance with Supabase’s privacy practices.
  • Google: For OAuth authentication and website analytics. When you sign in with Google, your authentication is handled by Google’s services. Google Analytics collects anonymised usage data to help us understand how visitors use our website (see Cookie policy for details).
  • Resend: For sending transactional emails (such as contact form submissions). Resend processes email addresses only for the purpose of delivering messages.
  • Vercel: For hosting our website. Vercel may collect basic usage analytics as part of their hosting services.

We do not sell, trade, or rent your personal information to third parties. We only share information with service providers who help us operate our services and who are bound by confidentiality obligations.

Trial mode and local storage

You can use Freebird without creating an account in trial mode. In trial mode, all your data (projects, annotations, screenshots, attachments) is stored locally on your device using Chrome’s storage APIs. This data is not transmitted to our servers and is not accessible to us.

If you later create an account, you can choose to migrate your trial data to your account. This migration is optional and requires your explicit action. Once migrated, your data will be stored in our cloud database and synchronised across your devices.

If you do not migrate your trial data and uninstall the extension, your local data will be permanently deleted.

Smart Fill and automated analysis

Freebird includes a Smart Fill feature that automatically analyses webpage elements for design issues (accessibility, colour contrast, typography, spacing, touch targets). This analysis is performed entirely locally in your browser using rule-based algorithms (axe-core, chroma.js, and custom analysers). No element data is sent to external AI services or third parties.

The analysis results are used only to suggest annotation content and are not stored separately or transmitted. You can choose to use, modify, or ignore these suggestions.

Project sharing

You can share your projects with others via shareable links as interactive audit results. When you share a project:

  • Anyone with the link can access the interactive audit and use all features including viewing, filtering, sorting, selecting annotations, and exporting (PDF, Markdown, CSV)
  • Recipients have full interactive access to explore and work with your annotations
  • No signup or account is required for recipients to access shared projects
  • You can stop sharing at any time by deleting the share link

Shared projects are accessible to anyone with the link. Recipients can interact with your annotations, select which ones to include in exports, and use all available features. Do not share links publicly if you wish to keep your annotations private. We recommend sharing links only with trusted recipients.

Cookies and tracking

We use cookies to maintain your session, remember your preferences, and improve our services. For detailed information about our cookie usage, please see our Cookie policy.

Your rights and choices

You have the following rights regarding your personal information:

  • Access: You can access and view your account information and data through your account dashboard
  • Update: You can update your profile information at any time in your account settings
  • Delete: You can delete individual projects, annotations, or your entire account at any time
  • Export: You can export your projects and annotations in multiple formats (PDF, Markdown, CSV) from your account dashboard
  • Trial data: You can delete trial data at any time by clearing your browser’s extension storage, or migrate it to your account when you sign up
  • Opt-out: You can opt out of non-essential communications by contacting us

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to certain processing activities.

Data retention and deletion

We believe in your right to privacy and data control:

  • Active accounts: We retain your data for as long as your account is active
  • Account deletion: When you delete your account, we immediately and permanently delete all your personal data, projects, annotations, and uploaded files. This action cannot be undone
  • Backup retention: Automated backups are retained for up to 90 days for disaster recovery purposes, after which they are permanently deleted
  • Analytics data: Anonymized analytics data (which cannot identify you) may be retained for up to 26 months for statistical purposes, after which it is automatically deleted
  • Legal requirements: In rare cases, we may be required by law to retain certain information for longer periods. We will only retain the minimum data necessary and only for the legally required duration
  • Trial data: Trial mode data stored locally on your device is retained until you delete it, migrate it to an account, or uninstall the extension. We have no access to trial data and cannot delete it on your behalf.

We never retain data longer than necessary. You can delete your account at any time from your account settings, or contact us directly to request deletion.

Children’s privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

International data transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this privacy policy.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Effective date" below. We encourage you to review this privacy policy periodically.

Contact us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please use the contact form on our website:

designowls.net

Our commitment to ethical data practices

We are committed to running an ethical business that respects your privacy. We will never sell, rent, or monetize your personal data. We do not use your data for advertising purposes unrelated to our service. We only collect and use data that is necessary to provide and improve Freebird, and we give you full control over your information at all times.

Effective date: January 2026