Privacy Policy
This Privacy Policy explains how PixDeel collects, uses, shares, and protects information when you visit a PixDeel storefront, browse or buy event photos and videos, or sign in to manage your purchases. PixDeel operates this platform; individual photographers operate their own storefronts on it.
We designed PixDeel to be privacy-protective by default. You can browse anonymously, and the features that recognize you across visits are off until you turn them on.
Some events offer face search, which finds your photos using a faceprint created from your selfie and the event photos. A faceprint is biometric data. Face search is optional and runs only after you consent; full details, including how long faceprints are kept and how they are destroyed, are in our Biometric Data Policy. If you appear in event photos but do not use face search, the Biometric Data Policy also explains how to ask us to remove your photos and permanently destroy any faceprint derived from them.
1. Information we collect
We collect only what we need to run the service:
- Information you provide: your email address when you buy media or request access to your purchases, the contents of your cart and orders, and, if you contact us or send us a report, the contents of your message and any contact details you choose to include.
- Anonymous usage analytics: aggregate page-view counts that help photographers understand what is working. This analytics signal uses a session identifier that is hashed with a key that rotates every day, so it cannot be tied back to you over time.
- Technical information needed to deliver pages securely, such as your IP address for rate limiting and abuse prevention.
2. How we use information
We use information to provide and secure the service:
- To process your purchases and give you access to the media you bought.
- To recognize you across visits and keep you signed in to your purchases, when you opt in (see Cookies below).
- To give photographers anonymous, aggregate analytics about their events.
- To protect the platform against fraud and abuse.
3. Cookies and remembering you across visits
We use a small number of first-party cookies and similar browser storage. Some are strictly necessary to keep the site working (for example, your cart). Anonymous usage analytics is optional and counts page views; you choose it at the cookie banner, which covers analytics only. The "remember me" feature below is a separate choice you make when you sign in, not on the banner.
We also offer an optional "remember me" feature so that when you come back you do not have to enter your email again, and you stay signed in to your purchases. This feature is off until you turn it on. If you do not turn it on, your visit stays anonymous, exactly as before.
When you turn on "remember me", we save a first-party cookie named pixdeel_id on your device. It works across all PixDeel storefronts. The cookie holds only a random identifier and a random key. It contains no readable personal information, and code running in your browser cannot read it. The cookie lasts up to 180 days. It refreshes while you keep using it (a rolling 60-day window) and expires for good 180 days after it was created, after which you sign in again.
We recognize a returning buyer using a one-way code derived from your email address. We treat that code as personal information. We do not use it for advertising profiles, and we do not sell it or share it with advertisers.
Please do not turn on "remember me" on a shared or public computer. We never pre-select it, and some sensitive actions may ask you to confirm your identity again even when you are remembered.
Except as described in this paragraph, we do not allow other parties to collect personally identifiable information about your online activities over time and across different websites when you use PixDeel: our pages carry no advertising networks, no third-party analytics, and no social media pixels. Our payment processor collects device information and sets cookies at checkout to detect and prevent fraud, and those cookies can operate across other websites that use the same processor; our infrastructure provider sets operational cookies used only to keep our own sites secure and working (for example, to tell people apart from automated traffic).
Our sites treat the Global Privacy Control and "Do Not Track" browser signals the same way: because we do not sell personal information, do not share it for cross-context behavioral advertising, and do not track you across other sites, there is nothing further for these signals to switch off. Analytics stays off unless you opt in at the banner.
4. How we share information
We share your email with the event organizer (the photographer) so they can support you and send order updates, as disclosed at checkout. We use trusted service providers to run the platform, including a payment processor for purchases and infrastructure providers for hosting.
We may also disclose information when the law or the safety of others requires it. This includes reports we are required by federal law to file with the National Center for Missing and Exploited Children (NCMEC) if we become aware of child sexual abuse material on the platform, responses to subpoenas, court orders, warrants, and other valid legal process, and disclosures we believe in good faith are necessary to protect the safety of our users, the public, or the platform.
If you report content or conduct to us, you can do so anonymously; if you share contact information, we use it only to handle the report, and we never reveal a reporter's identity to the person or account reported.
We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising.
5. Data retention
We keep information for as long as needed to provide the service and meet legal obligations. The 180-day lifetime described above governs the "remember me" login credential only. It is not the retention period of your order history or other records, which follow our general retention practices.
If specific content or records become subject to a legal preservation obligation or to valid legal process, we retain that material, with access restricted, for as long as the obligation lasts, even if a deletion request or our normal retention practices would otherwise remove it sooner. This paragraph does not change the destruction schedule for faceprints, which remains governed by our Biometric Data Policy.
We maintain internal records of our processing activities so we can account for what personal data we hold, why we hold it, and how long we keep it, including the retention and destruction schedule for face search described in our Biometric Data Policy.
6. Your choices and rights
You are always in control of recognition and your data:
- Decline at the cookie banner and stay anonymous.
- Sign out with one click. Signing out signs you out on every device, stops us from recognizing you, and withdraws your "remember me" consent.
- Ask us to access, correct, or delete your personal information. When you ask us to delete it, we remove the records that let us recognize you, including every "remember me" session tied to you.
7. Regional disclosures
PixDeel is a United States service offered to customers in the United States. The notes below are for visitors reaching us from other regions.
Brazil (LGPD): "remember me" is always a separate, optional choice that is never pre-selected, and we ask for it when you sign in rather than bundling it into the cookie banner. You have the rights to confirmation, access, correction, anonymization, portability, deletion, and to withdraw consent at any time.
California: we do not sell your personal information, and we do not share it for cross-context behavioral advertising. We honor requests to know, correct, and delete personal information from all users, whether or not a particular state privacy law applies to us.
European Economic Area: PixDeel is operated from the United States and does not currently target the EEA. If you contact us from the EEA, you may exercise applicable data-protection rights through the contact below.
8. Children
PixDeel is intended for adult buyers, and you must be 18 or older to buy media or open an account. Event photos may still include children. Children are not permitted to use face search. Because event galleries are indexed automatically, an event photo that includes a child may be processed for face matching. A parent or guardian can require us at any time to remove a child's photos and permanently destroy any faceprint derived from them, and we act on these requests promptly.
We do not scan event photos to detect or identify children. The way to have a child's data handled is to tell us: a parent or guardian can ask us to remove a child's photos or stop processing a child's data at any time through the Privacy Center or at privacy@pixdeel.com, and can mark the request as being about a child so we apply reinforced protection. We act on these requests promptly. We do not knowingly enable "remember me" or collect personal information from anyone under 13.
9. Security and international processing
We protect credentials using one-way hashing and store no readable secret. PixDeel is operated from the United States and your information is processed on infrastructure located in the United States. If you access PixDeel from another country, you do so understanding that your information will be processed in the United States, where privacy laws may differ from those where you live.
10. Changes to this policy
We may update this policy. When we make a material change to how we recognize you or use your information, we will update the date above and, where appropriate, ask for your consent again (at the cookie banner for analytics, or when you next sign in for the "remember me" feature).
11. Contact
Questions about this policy or your data can be sent to privacy@pixdeel.com.
Data Protection Contact: PixDeel is responsible for protecting your personal data and is the controller of the biometric face-search layer. You can reach the team responsible for data protection at privacy@pixdeel.com. If you prefer postal mail, email us and we will provide a mailing address for the PixDeel Data Protection Contact.