Who is responsible

PixOfUs is operated by Loreprint AS, the data controller. Our contact details are at the bottom of this page. This notice applies to PixOfUs at pixofus.com.

What we use your information for

Account and saved work: We use your email address, account ID, sign-in information, pictures, descriptions, designs and basket to provide access and preserve your work. The legal basis is our contract with you (GDPR Article 6(1)(b)). We need an email address to create an account; you can still explore and create browser drafts without one.

When you choose Facebook or Google sign-in, Supabase receives your account identifier, email address and any name and profile picture shared by the provider. Name and profile picture may be stored as optional profile information. Signing in does not give consent to marketing.

Orders and delivery: We use your name, email, delivery address, phone number, order details and payment status to take payment, print and deliver your order. The legal basis is our contract. Required checkout information is necessary to complete the purchase.

Accounting: We retain necessary purchase and payment records to meet legal obligations (Article 6(1)(c)).

Support and security: We process enquiries, technical logs, IP addresses and error data to help you, resolve faults and prevent abuse. The basis is our legitimate interest in a secure, functioning service (Article 6(1)(f)), or our contract where the enquiry concerns your purchase.

Prize draws and coupons

When you enter a prize draw, we use your account ID and account email address, the campaign you enter, the time of entry and the version of the terms you accepted. For your coupon we record its value, expiry and whether it is linked to a pending payment or has been used. We need this information to register one entry per account, administer the draw, contact the winner and issue and apply the coupon.

Entry is voluntary, but an account with an email address is necessary to register your entry and contact you if you win. Our legal basis for administering the draw and fulfilling the coupon offer is our agreement with you (Article 6(1)(b)). Entering does not give consent to newsletters, analytics or advertising, and these choices do not affect your chance of winning.

After the campaign, we retain your entry for 90 days after the campaign’s final coupon deadline to answer enquiries and document participation and allocation. The basis for this limited retention is our legitimate interest in resolving campaign enquiries (Article 6(1)(f)). We delete entries and unused coupons with no linked order in the daily cleanup after those 90 days, normally by the following day. This cleanup does not delete your account or saved images.

Coupon records linked to an order or payment follow the retention rules for purchase, payment and support documentation below. They are retained when necessary to resolve a payment, handle the purchase or meet accounting obligations. We do not create a separate contact list for later advertising from entries.

Supabase stores entries and coupons. Vercel processes requests, and Inngest runs scheduled cleanup. Email correspondence is handled through our email provider. For prize production, Gelato and its production and delivery partners receive the information needed to print and deliver the prize. Providers and any processing outside the EEA are described below. We do not publish the winner’s name or image without separate permission.

If you consent to analytics, we use PostHog to measure offer views, entry, coupon application in the basket and completed purchases. This is separate from the participant register and follows the analytics choices and retention description below. Deleting an entry does not automatically delete analytics data already sent.

Contact hei@pixofus.com for access, correction or deletion, to withdraw your entry, or to object to retention based on legitimate interests. You can request our legitimate-interest assessment. If you withdraw before the draw, you no longer participate. You may still use a valid coupon under its terms. Your right to complain to Datatilsynet and your other rights are explained below.

Photos and artificial intelligence

You can use your own photos directly on a poster or card. When you choose to generate or edit an image with AI, your description and any reference photos are sent to fal.ai, which routes processing to the model provider. We use OpenAI models for generation and Topaz through fal.ai to increase the resolution of pictures for posters.

Pictures may contain personal information about you and others. Only use pictures you are entitled to use, and agree on their use with the people shown. Take particular care with pictures of children and avoid sensitive information in images and descriptions.

Your work is not published in a public PixOfUs gallery. We need access to process your requests and produce prints. This does not give us permission to use your pictures in advertising.

Our service providers

Supabase handles accounts, sign-in and the database. Cloudflare R2 stores and delivers image files. Vercel hosts the website and processes technical requests and logs. Inngest coordinates image and order jobs and processes the information these jobs need.

fal.ai and the model providers process pictures and descriptions for generation and resolution enhancement. Gelato and its production and delivery partners receive print files, order details and the contact and delivery information they need.

Stripe processes payments and receives necessary customer and order information. We receive payment status and references but do not store full card details. Stripe also processes information for its own purposes, including legal obligations and fraud prevention.

Resend sends sign-in codes. Google Workspace handles support enquiries and our replies. Upstash limits abuse when this security feature is enabled, using IP addresses or account IDs and request counts.

Processing outside the EEA

Several providers operate internationally. Pictures and other information may be processed outside the EEA, including in the United States. These transfers require a valid legal mechanism, such as an adequacy decision or EU standard contractual clauses with necessary supplementary measures. Contact us for details of recipients and the transfer basis for your information, and to request a copy of relevant safeguards.

How long information is kept

Account-saved work is kept so you can continue and order later. You can ask us to delete your account and associated work. We also assess what must be retained for an ongoing purchase, a complaint or a legal obligation.

We attempt to delete temporary reference images when image processing finishes. Failures and unfinished jobs may leave them stored for longer. This is not a guarantee of deletion within a fixed number of hours. Images you save for later use are separate from these temporary files.

Accounting records are generally retained for five years after the end of the financial year. Necessary purchase records cannot always be deleted with your account. Enquiries and error data are kept as long as needed to handle the matter, security or legal claims. Provider copies and backups have their own retention cycles.

Cookies and browser storage

We use necessary browser storage for sign-in, language, your basket and drafts. Guest photos and work are stored locally in your browser before they may be saved to your account at sign-in. Clearing site data may remove local drafts.

We use Vercel Web Analytics for aggregate visitor statistics without analytics cookies. We also use PostHog for limited server-side operational and sales statistics: payment outcomes, amounts, currency, image model, processing time and technical failures. These events contain no account ID, email, browser identity, pictures or prompts. Payment events have a separate reference to prevent double counting. The basis is our legitimate interest in measuring sales and keeping the service reliable; this is not used to follow individuals’ browser activity.

If you consent to analytics, we use PostHog for page views, clicks, scrolling, performance, errors and session replays to understand and improve the purchase journey. Your images, card text, project names, form contents and other personal information are hidden in replays. Shared content such as menus, buttons, product information and example images can be shown. Browser identifiers are stored locally, and activity can be linked to your account ID when signed in and to image generation and purchases. We do not send your email address as an analytics property. We also use campaign codes and page categories to understand what leads to purchases. These are kept in the browser tab for up to 24 hours and attached to the order at checkout. Analytics and marketing are separate choices.

With marketing consent, we use Meta Pixel and server-side purchase measurement to measure which ads lead to visits and purchases. Meta may receive browser and click identifiers, events such as page views and basket activity, and confirmed purchase amount, currency and time. For browser visits, Meta also receives your IP address and browser information. A SHA-256-hashed email address is also used for purchase matching at Meta; this is a pseudonymous identifier, not anonymisation. We do not send photos, descriptions or personal card text to Meta. Marketing events also pass through PostHog, independently of your analytics choice. Meta may use the information under its terms and privacy policy.

You can reject both analytics and marketing and still use every feature. Under “Privacy choices”, you can change your choices or withdraw either consent at any time. We remember choices for up to 180 days. Consented ad identifiers and campaign codes are stored in your browser for up to 90 days and attached to your order at checkout. When signed in, choices and timestamps are also saved to your account. Withdrawal stops new collection; information already sent is not automatically deleted. PostHog processes analytics in our EU region; international access and transfers are covered by our provider agreements. Contact us for access, deletion or to object to processing based on legitimate interests.

Your rights

You can request access, correction, deletion and restriction of processing. You may have a right to receive information in a machine-readable format and can object to processing based on legitimate interests. Where consent is the legal basis, you can withdraw it without affecting earlier lawful processing.

Use the contact address below. We may ask for necessary identity verification. We normally respond within one month. If more time is needed, we explain why within that period. You can complain to the Norwegian Data Protection Authority (Datatilsynet).

To request deletion of your PixOfUs account and associated data, including information received from Facebook or Google, email hei@pixofus.com. State that you want deletion and, where possible, use the email address associated with your account. We verify your identity before processing the request. Information we must retain for purchases or legal obligations is explained above.

We do not use your information for automated decisions with legal or similarly significant effects on you.