Privacy Policy
Last updated: 14 October 2026
PixTrace keeps as little of your data as it can. Your photos are deleted within about 15 minutes, we never use them to train AI, and we don't use advertising or tracking cookies. This policy explains the details.
1. Who is responsible for your data
Kaspar ter Glane, trading as PixTrace, is the data controller. Contact us about anything in this policy at hello@pixtrace.net.
2. What we collect
- Account details. Your email address, and a scrambled (hashed) version of your password held by our login provider. We never see your actual password.
- Credits and subscription. How many credits you have, your plan status, and a Stripe customer reference. We never see or store your card details.
- Your photos. Metadata, such as GPS location, is removed from your photos before they're uploaded.
- Your drawings. Your drawings as SVG and DXF files, kept for about 15 minutes. We don't look at your photos or drawings.
- Technical data. Our server logs record which features were used and when, but not your IP address. Our hosting and security provider processes IP addresses to protect the site from attacks.
3. Why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Running your account and credits | Account, credits | Contract |
| Converting your photos | Photos, drawings | Contract |
| Taking payments | Subscription details (via Stripe) | Contract |
| Sending account emails (sign-up, password reset) | Email address | Contract |
| Security, preventing abuse, fixing faults | Technical data | Legitimate interests |
| Meeting legal duties | Records we're required to keep | Legal obligation |
4. Your photos and AI
Your photo is held while your conversion runs. After that, your photo and the finished drawing are kept for only about 15 minutes from when you uploaded the photo, then deleted automatically. We don't keep a history of your conversions.
We never use your photos or drawings to train AI.
Your photos are processed entirely by automated systems. Nobody at PixTrace looks at your photos or drawings. To create your drawing, your photo is sent to a third-party AI provider. We use its paid service, under which your content isn't used to train or improve its products. The provider keeps requests for up to 55 days only to detect misuse, and its staff look at content only if its safety systems flag it.
To give your download a descriptive file name, we also ask the AI provider for a short title for your photo, using web search to make it more accurate. The provider keeps these search-assisted requests for 30 days.
5. Who processes your data
We use trusted service providers to run PixTrace: website hosting and security, servers and databases, a job queue, an AI provider, payments and email. Each only gets the data it needs for its job and processes it on our instructions.
Stripe processes your payments and handles your card details under its own privacy policy. We never see or store your card details.
6. International transfers
Some of these providers are in the US or operate worldwide, so your data may be processed outside the UK. Where it is, we rely on safeguards approved under UK law: the UK–US data bridge for providers certified under it, or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in their data processing agreements.
7. How long we keep data
| Data | How long |
|---|---|
| Photos and drawings | About 15 minutes |
| AI provider's misuse logs | 55 days |
| Account and credits | While your account exists, then deleted within 30 days of closing it |
| Technical logs | Up to about a month |
| Payment records | Kept by Stripe as required by law |
8. Cookies and browser storage
We don't use advertising, analytics or tracking cookies.
We count visits with Cloudflare Web Analytics. It doesn't use cookies or identify you, and only gives us totals, such as how many people visited a page and which website sent them.
The website stores a few things in your own browser to work properly:
- Your login session, so you stay logged in.
- Any conversion in progress, so a refresh doesn't lose it. This includes a small copy of your photo, and it's removed as soon as the conversion finishes.
These are strictly necessary for the service, so they don't need your consent.
9. Your rights
Under UK data protection law, you can ask to see, correct or delete your data, to restrict or object to how we use it, and to get a copy in a portable format. Email hello@pixtrace.net and we'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office. We'd appreciate the chance to sort it out first.
10. Security
All connections are encrypted (HTTPS/TLS): between your browser and PixTrace, and between our servers and our providers. Your account data is held in a database that is encrypted at rest, and passwords are stored only as one-way hashes. Each account can only see its own data and conversions, and access to our systems is limited to what's needed to run the service.
11. Changes to this policy
If we make significant changes, we'll let you know by email or on the website at least 30 days before they take effect, unless a change is needed sooner by law or doesn't affect your rights. If PixTrace is transferred to another business, or to a company set up to run it, your data will move with it under the same protections, and we'll let you know.