Back to site

Privacy, Terms & Cookies

Last updated 28 October 2026. Plain language first — the details follow.

Privacy policy

In short: we store what you need to use UX Kritik, we never sell it, we send screenshots to our AI provider only to run the analysis you asked for, and you can export or delete everything yourself from your account page.

Who is responsible

UX Kritik is operated by Subversive Symmetry (César Martins Lima), Portugal. Contact: info@ux-kritik.com.

What we collect and why

DataPurposeLegal basis (GDPR)
Name, email, hashed passwordYour account and sign-inContract (Art. 6(1)(b))
Screenshots, descriptions, results, projects, mentor chatsProviding the analyses and history you requestContract
Gumroad license key and purchase emailVerifying your Pro subscriptionContract
IP address, security logsPreventing abuse, rate limiting, securityLegitimate interest (Art. 6(1)(f))
Product-update emailsOnly if you opted inConsent (Art. 6(1)(a)) — withdraw any time
A/B test participants: their choice, click position, timing, optional comment, device type, a one-way hashed fingerprintRunning the test and preventing duplicate answersLegitimate interest of the test owner

Who processes data for us

Where providers are outside the EU/EEA, transfers rely on the European Commission's Standard Contractual Clauses or adequacy decisions.

How long we keep it

Until you delete it or your account. Security logs are kept for up to 12 months. Password-reset links expire after 60 minutes.

Your rights

You can access, export (Account → Export my data), correct, or delete (Account → Delete account) your data at any time, object to processing, and complain to the Portuguese supervisory authority, CNPD.

Don't upload what you shouldn't

Please blur personal data of other people (names, emails, health or financial details) in screenshots before uploading, and only upload interfaces you are allowed to share.

Terms of use

Cookie policy

We use one strictly necessary cookie, uxk_sess, to keep you signed in and protect forms against forgery. Because it is essential, it does not require consent. Your browser's local storage keeps small preferences (theme, colours in the contrast checker, active project). We use no analytics, advertising or tracking cookies, so there is no cookie banner to dismiss.