Privacy policy

This policy explains what personal data PixelShapr collects, why, and your rights under UK GDPR.

PixelShapr is a trading name of Darkhouse Holdings Ltd, registered in England and Wales. Registered office: Unit A, 82 James Carter Road, Mildenhall Industrial Estate, Suffolk, IP28 7DE, United Kingdom. Contact: [email protected].

Who we are

Darkhouse Holdings Ltd is the data controller for PixelShapr accounts. If you have a privacy request, email [email protected].

What we collect

• Account email — the address you sign in with (magic link, no password).
• Uploads and generations — stills you upload into workflows or libraries, and the images we fetch back so you can download them.
• Job and billing records — workflow, credit debit/refund, purchase history, and technical logs needed to run the service (for example job ids and failure codes).
• Payment data — handled by our payment provider. We store its customer / session references, not your full card number.
• Usage analytics — pages you visit and rough device / location data via Google Analytics.

Why we use it

• Contract — to create your account, run jobs, store your library, sell credit packs, and refund failed jobs.
• Legitimate interests — to keep the service secure, prevent abuse, keep accounts, and improve reliability.
• Legal obligation — tax, accounting, and responding to lawful requests.

We do not sell your personal data. We do not use your uploads to train our own models.

Who we share it with

We share data only with the service providers that need it to do their job. We group them by what they do for us rather than naming them — providers can change as we review suppliers.

• Image-generation providers — run the AI engines. Uploads and prompts go there to produce a result.
• Payment provider — checkout and payouts for credit packs.
• Email provider — magic-link and operational email.
• Hosting provider — the server that hosts the app, database, and stored stills.
• CDN and security provider — DNS, caching/proxy, and abuse protection in front of the site.
• Web analytics — usage statistics (Google Analytics).

Each provider is engaged under its standard data-processing terms and receives only what it needs for the specific job. Some are outside the UK. Where that happens we rely on their published transfer tools (for example Standard Contractual Clauses).

How long we keep it

Account, library, and result stills stay until you ask us to delete the account, or we close it under the terms. Purchase and ledger rows are kept as long as we need them for accounting (typically up to six years in the UK). Server logs rotate on a shorter cycle.

Your rights

You can ask to access, correct, or export the personal data we hold, or to object / restrict certain processing. To be forgotten: email us. We will delete or anonymise your account, uploads, library, and stored results. We keep anonymised ledger rows that we need for accounts (no email, no stills).

There is no self-serve export button yet. Email [email protected] and we will send what we hold. You can also complain to the ICO (ico.org.uk).

Cookies

We set an httpOnly session cookie after you confirm a magic-link sign-in, so you stay signed in. With your permission we also load Google Analytics (gtag.js, measurement id G-E7PZSE5CLV) to count visits and see which pages are used — the cookie notice on the site makes that choice. Analytics sets a first-party cookie only after you allow it. We do not use advertising cookies.

Children

PixelShapr is not aimed at children under 18. Do not create an account for a minor.

Changes

We will update this page when the facts change. The date at the top is the latest version.