Privacy, in plain language.

Who we are

Pixelcasso is based in the Netherlands. For privacy questions, requests, or complaints, use our contact page.

Information we collect

We collect only the information needed to provide the website, account, authentication, support, and paid Pixelcasso features.

• Account information, including your email address, profile image, and authentication records.
• Passkey metadata and public credentials. Your biometric data and private passkey never leave your device or passkey provider.
• Session information such as browser or app type, device type, IP address, and recent activity.
• Billing information, payment status, invoice details, billing address, and tax identification information processed through our payment processor.
• Messages and contact details you submit through our contact page.
• Technical information needed for security, fraud prevention, and service reliability.
• Privacy-preserving website and app usage data, including page views, referrers, browser or app version, device type, approximate country, performance measurements, first launches, updates, and selected feature events. This data is aggregated and does not use advertising identifiers.

How we use information

• Create and secure your Pixelcasso account and send passwordless sign-in codes.
• Provide Premium access, process payments, generate invoices, and manage subscriptions.
• Respond to questions, support requests, privacy requests, and feedback.
• Prevent abuse, investigate security incidents, and maintain the reliability of our services.
• Understand aggregate website and app usage and improve the performance and usefulness of Pixelcasso.
• Meet legal, tax, accounting, and regulatory obligations.

Legal bases

Where the GDPR applies, we process information because it is necessary to perform our agreement with you, comply with legal obligations, pursue legitimate interests such as security and support, or because you have given consent. You may withdraw consent at any time where consent is the applicable basis.

Service providers

We use carefully selected providers to operate Pixelcasso. They process information on our behalf or as independent controllers where their services require it.

• Our payment processor for checkout, payments, subscriptions, tax information, invoices, and billing records.
• Neon for hosted account and subscription database infrastructure.
• Resend for transactional sign-in emails and contact-form delivery.
• Vercel for website hosting, deployment, networking, and server-side functions.
• A self-hosted Umami installation for privacy-focused, aggregate website and app analytics.

Cookies and local storage

Pixelcasso uses strictly necessary cookies and similar storage to keep you signed in, protect authentication flows, remember security state, and operate account features. Our self-hosted Umami website tracker does not set cookies, respects your browser’s Do Not Track preference, and does not collect URL query strings or page fragments. The macOS app can send anonymous first-launch, version, and feature-usage events; it never includes filenames, images, prompts, account details, or persistent identifiers, and you can disable it in Pixelcasso Settings. We do not use this information for third-party advertising.

How long we keep information

We keep account information while your account is active and for a reasonable period afterwards. Authentication and security records are retained as needed to protect the service. Billing, invoice, and transaction records may be retained for the period required by Dutch tax and accounting law. Contact messages are retained only as long as needed to handle the request and maintain an appropriate support record.

International transfers

Some providers may process information outside the European Economic Area. Where required, transfers are protected by adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

Your privacy rights

Depending on your location, you may have the right to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing. You may also lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority.

• Use your account page to review sessions, passkeys, plan information, and invoices.
• Use our contact page to exercise a privacy right or request account deletion.
• We may need to verify your identity before completing a request.

Security

We use passwordless authentication, passkeys, access controls, encrypted transport, and service-provider security controls. No system is completely secure, but we work to reduce risk and respond appropriately to suspected incidents.

Changes to this policy

We may update this policy as Pixelcasso evolves or legal requirements change. We will publish the revised version here and update the date above. If a change materially affects your rights, we will provide additional notice where appropriate.