PPixBatch

Privacy Policy

Last updated: 2026-11-08

PixBatch is a browser-based image processing tool. This policy explains what we collect, what we deliberately do not collect, and the choices you have.

1. The short version

  • Your image files are never uploaded to us. They are read, redrawn and re-encoded inside your browser.
  • We store the minimum needed to run accounts and subscriptions: email, a password hash, and a monthly usage count.
  • We do not sell personal data and we do not run advertising trackers.

2. What we collect

Account data

  • Email address — to identify your account and contact you about billing.
  • Password — stored only as a salted PBKDF2-SHA256 hash; we cannot read it.
  • Optional display name you choose to enter.

Usage data

  • A counter of images processed per calendar month, plus the action type and file count per batch.
  • We do not record file names, image contents, dimensions or metadata of your files.

Technical data

  • Session cookie identifier, plus the user agent and IP address associated with sign-in, retained for account security.

3. Cookies

We set one essential cookie, pb_session, which keeps you signed in. It is HttpOnly, Secure and SameSite=Lax, and expires after 30 days. Because it is strictly necessary for the service, it is not subject to a consent banner under the ePrivacy Directive. We do not use analytics or advertising cookies.

4. Third parties

  • Cloudflare — hosts the site and the API, and processes requests on our behalf.
  • Lemon Squeezy — acts as Merchant of Record for payments. When you subscribe, your email and payment details are processed by Lemon Squeezy under its own privacy policy; we receive subscription status and identifiers, not card data.

5. Legal bases (GDPR)

  • Contract — to provide the account and the service you requested.
  • Legitimate interests — to keep the service secure and prevent abuse.
  • Legal obligation — to keep records required for tax and accounting.

6. Retention

Account and usage records are kept while your account exists. Deleting your account removes the account row, sessions and usage counters; billing records held by Lemon Squeezy follow its retention schedule and applicable tax law. Webhook logs are retained for 90 days for reconciliation and then deleted.

7. Your rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. California residents may request disclosure of the categories of personal information collected. To exercise any of these, email us at the address below; we respond within 30 days.

8. International transfers

Our infrastructure and payment processor may process data outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent safeguard offered by the provider.

9. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

If this policy changes materially we will post the new version here and update the date above.

11. Contact

Privacy questions: privacy@pixbatch.com