Cosmos Studio
Privacy Policy
Last Updated: 29 March 2026 Effective Date: 29 March 2026
1. Introduction
Cosmos Studio ("we", "our", or "the App"), operated by Cosmos One, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use Cosmos Studio.
Cosmos Studio is a browser-based tool that runs entirely on your device. All data is processed and stored locally in your browser — no backend server, no user accounts, and no cloud storage are involved.
By using Cosmos Studio, you agree to the practices described in this Privacy Policy.
2. Overview
Cosmos Studio is a professional web application for creating Google Play Store screenshots, feature graphics, and promotional materials with device frames, 3D phone mockups, text overlays, and custom styling. The app runs entirely in your browser with no server communication.
Key Points:
- All processing happens locally in your browser — no data is sent to any server
- No user accounts or authentication are required
- No cookies are set or read
- No third-party analytics, tracking pixels, or advertising SDKs are used
- Your screenshots, designs, and project files never leave your device unless you explicitly export them
- We do not sell, share, or transmit your personal data
- The app works offline once loaded (and fully offline as a Chrome extension)
3. Information We Collect
3.1 Information You Create
When you use Cosmos Studio, the following data is created and stored locally on your device only:
| Data | Storage Mechanism | Purpose |
|---|---|---|
| Design projects | IndexedDB (ScreenshotStudio) |
Your screenshot and feature graphic designs |
| Uploaded screenshots | Browser memory / IndexedDB | Images you upload for phone mockups |
| Text content | Canvas state (in-memory / IndexedDB) | Headlines, captions, and text overlays you create |
| Tab sessions | IndexedDB | Restores your open tabs and folder structure on reload |
| Folder access handles | IndexedDB | Remembers your selected project folder so you don't have to re-select it |
Important: All of this data is created by you and stored only on your device. We have no access to it.
3.2 Automatically Collected Information
Small preference values are stored in your browser's localStorage:
| Data | Purpose |
|---|---|
| Theme preference | Remembers your light/dark mode choice |
| Storage consent record | Records that you accepted this policy, with timestamp |
| Onboarding status | Tracks whether you've completed the welcome tour |
| Debug logging toggle | Developer tool setting (off by default) |
3.3 Information We Do NOT Collect
- No personal information — no name, email, phone number, or address
- No device identifiers — no fingerprinting, no hardware IDs
- No IP addresses — we make no server requests that would capture your IP
- No location data — no geolocation access
- No usage analytics — no page views, click tracking, or session recording
- No cookies — we do not set any HTTP cookies
- No advertising data — no ad SDKs, no ad targeting
- No crash reports — errors stay in your browser console
4. Browser Storage & APIs
4.1 Storage Mechanisms
| Mechanism | Keys / Databases | Purpose |
|---|---|---|
| localStorage | theme |
Light/dark mode preference |
| localStorage | storage-consent |
Consent acceptance status |
| localStorage | storage-consent-date |
ISO timestamp of consent acceptance |
| localStorage | onboarding-completed |
Welcome tour completion status |
| localStorage | debug-logging-enabled |
Developer debug toggle (off by default) |
| IndexedDB | ScreenshotStudio → handles store |
Project folder access handle and tab session data |
4.2 Browser APIs
| API | Purpose | Data Implications |
|---|---|---|
| File System Access API | Direct file saving to a user-selected folder | Access granted explicitly by user via browser folder picker; revocable at any time; limited to the selected folder only; Chromium browsers only |
| Canvas API | 2D design rendering and image export | Local rendering only; no data transmitted |
| WebGL (Three.js) | 3D phone mockup rendering | Local rendering only; no data transmitted |
| IndexedDB | Persistent project and session storage | Domain-isolated by browser; no data transmitted |
4.3 Chrome Extension Permissions
Cosmos Studio is also available as a Chrome extension (Manifest V3):
| Attribute | Value |
|---|---|
| Offline capability | Fully offline (offline_enabled: true) |
| Content Security Policy | script-src 'self' 'wasm-unsafe-eval'; object-src 'self' |
| Special permissions | None — no access to browsing data, history, or other tabs |
| Storage model | Extension-isolated localStorage and IndexedDB (same data model as web version) |
5. How We Use Your Information
5.1 Core Functionality
All data processing occurs locally in your browser for these purposes only:
- Design Rendering: Rendering your designs on the canvas, applying templates, managing text and images
- Session Restoration: Preserving your workspace (open tabs, active project, folder structure) between browser sessions
- User Preferences: Applying your chosen theme and respecting your consent and onboarding state
- File Export: Converting your canvas designs to PNG or JPEG files when you explicitly choose to export — files are saved to your device only
5.2 We Do NOT Use Your Data For
- Advertising or ad personalisation
- User profiling or behavioural analysis
- Training machine learning or AI models
- Sharing with any third party
- Any purpose other than providing the app's core features
6. Data Storage and Security
6.1 Storage Architecture
Cosmos Studio does NOT transmit your designs or project data to external servers. All data stays in your browser. Zero network calls are made during normal app use.
| Data | Location | Protection |
|---|---|---|
| User preferences | localStorage (browser) |
Domain-isolated by browser same-origin policy |
| Project data & file handles | IndexedDB (browser) | Domain-isolated by browser same-origin policy |
| Uploaded images | Browser memory / Blob URLs | Transient; not persisted beyond session unless saved to IndexedDB |
| Exported files | Your local file system | Under your device's own security controls |
6.2 Security Measures
- No server attack surface: There is no backend, database, or API to breach. All data lives on your device.
- Browser same-origin policy: Your data is isolated to the Cosmos Studio domain and cannot be accessed by other websites.
- No network transmission: Zero HTTP requests are made to external servers during normal app use. Your data never traverses a network.
- Content Security Policy (Chrome extension):
script-src 'self' 'wasm-unsafe-eval'; object-src 'self'— restricts code execution to the app's own scripts. - HTTPS delivery: The web version is served over HTTPS. No data is transmitted beyond the initial page load.
- Encryption at rest: Browser storage (localStorage, IndexedDB) is protected by your operating system's user-level file encryption and your browser's security model.
7. Data Sharing and Disclosure
7.1 Data NOT Shared
Cosmos Studio makes zero network requests during normal operation. Your data is never transmitted to:
- Cosmos One servers (we have none for this app)
- Analytics services
- Advertising networks
- Data brokers
- Any third party whatsoever
7.2 User-Initiated Sharing
Data only leaves your browser in these user-initiated scenarios:
| Action | What Happens | Your Control |
|---|---|---|
| Export as PNG/JPEG | Design is saved to your local file system | You choose when, where, and what to export |
| Clicking external links | Standard browser navigation to attribution/support links | You choose whether to click |
No data is attached to or transmitted with these actions beyond standard browser behaviour.
7.3 We Do NOT
- Sell personal data
- Share data with data brokers
- Provide data to advertisers
- Share data with any unlisted party
- Use data for any undisclosed purpose
8. Third-Party Services
8.1 Client-Side Libraries
Cosmos Studio uses the following open-source libraries, all of which run entirely in your browser with no data transmission:
| Library | Purpose | Licence |
|---|---|---|
| React | User interface framework | MIT |
| Fabric.js | 2D canvas manipulation | MIT |
| Three.js | 3D rendering for phone mockups | MIT |
| React Three Fiber | React bindings for Three.js | MIT |
| Tailwind CSS | Styling | MIT |
8.2 3D Model Attribution
Cosmos Studio includes a 3D model of the Samsung S24 Ultra by me_blender, sourced from Sketchfab and licensed under CC BY 4.0. This model is bundled with the app and loaded locally — no external download occurs during use.
8.3 Hosting (Web Version)
The web version of Cosmos Studio is hosted on Netlify. Netlify serves the static application files and may process standard HTTP metadata (IP address, user agent) in accordance with Netlify's privacy policy. Cosmos Studio itself does not instruct Netlify to collect or store any user data. Once the app loads in your browser, all processing is local.
9. Data Retention and Deletion
9.1 Retention
| Data | Retention Period | How to Delete |
|---|---|---|
| Preferences (localStorage) | Until you clear browser data | Clear site data in browser settings |
| Project data (IndexedDB) | Until you clear browser data | Clear site data in browser settings |
| Exported files | Permanently on your device | Delete the files from your file system |
| Consent record | Until you clear browser data | Clear site data in browser settings |
9.2 Deletion Instructions
You have full control over all stored data:
- Clear all app data: In your browser, go to Settings > Privacy > Site Data, find the Cosmos Studio domain, and clear its data. This removes everything instantly.
- Clear via browser DevTools: Open DevTools (F12) > Application tab > Storage > Clear site data.
- Uninstall the Chrome extension: If using the extension version, uninstalling it removes all associated storage.
- Delete exported files: Exported PNG/JPEG files are on your device — delete them as you would any file.
No server-side data exists to request deletion of. All data is under your direct control.
10. Your Privacy Rights
You have complete control over your data:
- Access: Inspect stored data directly in your browser's DevTools (Application > Storage)
- Correction: Edit your designs and preferences directly in the app
- Deletion: Delete all data at any time by clearing browser site data (see §9)
- Export / Portability: Export your designs as image files at any time
- Objection / Restriction: Stop using the app at any time; clearing site data removes all traces
Since Cosmos Studio stores no data on any server and collects no personal information, most privacy rights can be exercised directly through your browser without contacting us.
10.1 For EEA/UK Users (GDPR)
Cosmos Studio does not process personal data on any server. The limited data stored in your browser (preferences, project files) constitutes data under your sole control. No data controller/processor relationship exists as we never receive your data. The storage consent banner complies with the ePrivacy Directive's requirements for local storage.
10.2 For California Users (CCPA)
Cosmos Studio does not sell personal information. We do not collect, share, or disclose personal information to third parties. Since no personal information is collected, there is no data to opt out of selling or to request disclosure of.
11. Children's Privacy
Cosmos Studio is a general-purpose design tool intended for users aged 13 and older. We do not knowingly collect any personal information from anyone, including children under 13. Since the app operates entirely in-browser with no data collection, no special COPPA considerations apply beyond this age recommendation.
The app contains no advertising, in-app purchases, social features, or external communication channels.
12. International Data Transfers
Cosmos Studio does not transfer any user data internationally, as no user data leaves your browser.
The web version's static files are served from Netlify's CDN, which may use servers in various countries. However, this only applies to delivering the application code to your browser — once loaded, all data processing is local. Netlify's infrastructure is subject to Netlify's privacy policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legal requirements, new features, or improvements to security practices. Changes will be reflected in the "Last Updated" date at the top of this document. If we make material changes that significantly alter our privacy practices (for example, if we ever add server-side features), we will provide prominent notice within the app.
Your continued use of Cosmos Studio after changes are posted constitutes acceptance of the updated Privacy Policy.
14. Contact Information
If you have questions about this Privacy Policy:
Email: support@cosmosone.cloud Subject Line: Cosmos Studio Privacy Website: https://cosmosone.cloud Response Time: Within 5 business days
15. Summary
| Aspect | Details |
|---|---|
| Operator | Cosmos One |
| App type | Browser-based web application (also available as Chrome extension) |
| Authentication | None required |
| Server communication | None — 100% client-side |
| Cookies | None |
| Analytics / tracking | None |
| Advertising | None |
| Data storage | Browser localStorage and IndexedDB only |
| Data transmission | None — data never leaves your browser |
| Third-party data sharing | None |
| User data collection | None — no personal information collected |
| Data deletion | Clear browser site data — instant, complete, under your control |
| Hosting | Netlify (static files only) |
| Open source libraries | React, Fabric.js, Three.js, Tailwind CSS (all MIT, client-side) |
| Age restriction | 13+ |
| Governing jurisdiction | Australia |