Introduction
At Pixload, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real-time event photography service.
Information We Collect
Personal Information
- • Name and email address when you create an account
- • Payment information for event processing
- • Camera and device information for connectivity
- • Event details (name, date, location) that you provide
Photo Data
- • Original photos uploaded during events
- • Processed and enhanced versions of photos
- • Facial recognition data: a biometric template is computed for every face detected in the photos, and it is stored (see the Biometric Data section)
- • Photo metadata (timestamp, camera settings, location if enabled)
Usage Information
- • App usage patterns and feature interactions
- • Gallery access logs and download statistics
- • Device information and technical diagnostics
- • IP addresses and general location data
How We Use Your Information
Service Delivery:
To provide real-time photo processing, gallery creation, and guest access management.
AI Processing:
To enhance photos, recognize faces for personalized galleries, and organize content automatically.
Communication:
To send event notifications, gallery links, and important service updates.
Payment Processing:
To handle billing for events and subscription services.
Improvement:
To analyze usage patterns and improve our service quality and features.
Legal Compliance:
To comply with applicable laws and protect our legal rights.
How We Protect Your Data
Encryption:
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Secure Storage:
Photos are stored on Cloudflare R2 (buckets in EU jurisdiction) with enterprise-grade security and access controls.
Limited Access:
Only authorized personnel have access to user data, and only when necessary for service delivery.
Gallery Security:
Each gallery uses cryptographically secure URLs that cannot be guessed or enumerated.
Facial Recognition:
To match people with their event photos, the app detects faces in the event's photos and computes biometric templates (mathematical representations of facial features). These templates are stored so the app can match you to the photos you appear in. They are used only for this purpose and are never shared with third parties. Templates computed from an event's photos are scoped to that event. See the Biometric Data section for retention periods, cross-gallery search and your rights.
Regular Audits:
We conduct regular security audits and vulnerability assessments.
Biometric Data
The app processes biometric data (facial features) to help you find the photos you appear in. A biometric template is computed for every face detected in the photos, as soon as they are uploaded and processed: this happens on every event, whether or not anyone ever runs a selfie search. When you take a selfie, a template is computed from it as well and compared with the templates of that event's photos to find you. Templates computed from an event's photos are scoped to that event.
- • Your selfie image is deleted within minutes, once its template has been computed
- • As an anonymous guest, the link between you and an event's photos is deleted automatically after 24 hours (extended to the end of the event for multi-day tournaments). On a signed-in account there is no such deadline: your selfie template is kept for 90 days, and that window restarts every time it successfully matches you in a gallery; once 90 days pass with no match, it is deleted automatically
- • Templates computed from an event's photos are used only within that event and are never shared with third parties. Your own selfie template is used across the other galleries you visit only if you tick the dedicated optional box when registering your face: this consent is never given by default, and never derived from another choice
- • You can withdraw your consent at any time, and what is deleted depends on how you searched. Signed in: the "Forget my selfie" button on your album, like Settings > Privacy on your account, deletes your face template both at Pixload and at our recognition service, together with the matches already found - the scope is your whole account, not one event. Not signed in (guest search): the same button erases the selfie rows kept for that event and the link between you and its photos; no account template is deleted, because a guest search never creates one (the signature computed from your selfie is compared, then discarded). In both cases the templates computed from the event's photos stay attached to that gallery; to have your photos and those templates removed, contact us or the photographer who organised the event
Cookies & Tracking Technologies
We use cookies and similar technologies to improve your experience. The technologies below are categorized by their legal basis.
Essential Cookies
- • Authentication and session management (Supabase auth cookies)
- • Language and theme preferences (localStorage)
Analytics Cookies (consent required)
- • Google Analytics (GA4) - usage statistics. Cookies: _ga (2 years), _gid (24 hours), _gat (1 minute). Only loaded after you accept analytics cookies.
- • PostHog - product analytics (EU-hosted). Cookies: ph_* (1 year). For connected users, your user ID and email are transmitted for analytics purposes. Only loaded after you accept analytics cookies.
- • pixload_attribution - audience-measurement cookie capturing the first page you visited and your acquisition source (referrer, UTM tags). HMAC-signed to prevent tampering. 30-day TTL, automatically cleared on the first login after signup. Only set after you accept analytics cookies.
No-Consent Technologies (legitimate interest)
- • Anonymous first-party audience measurement (aggregate gallery views and downloads). No cookies, no personal data, no cross-site tracking. Always active as CNIL-exempt audience measurement under legitimate interest.
- • Sentry - error monitoring for application stability (EU-hosted). Captures technical errors only (stack traces, browser info). Session replays on errors only, with all text masked and all media blocked. No user tracking or profiling.
- • Internal engagement tracking - anonymous gallery usage statistics (views, downloads, shares). Uses a random session-scoped visitor ID (UUID) with no link to your identity. No cookies. Based on legitimate interest.
You can manage your cookie preferences at any time using the "Cookie Policy" button in the footer.
Legal Bases (GDPR Art. 6)
We process your data based on the following legal grounds:
- • Consent (Art. 6(1)(a)) - Google Analytics, PostHog: only activated after your explicit consent via the cookie banner.
- • Performance of contract (Art. 6(1)(b)) - Pixload service: photo processing, gallery creation, facial recognition matching, account management.
- • Legitimate interest (Art. 6(1)(f)): Sentry (error monitoring) and internal engagement tracking (anonymous usage statistics).
- • Legal obligation (Art. 6(1)(c)) - Data retention required by applicable regulations.
Sub-processors
We use the following third-party service providers to deliver our services:
- • Supabase - Database and authentication (Ireland, EU)
- • Vercel - Web hosting and serverless functions (USA - EU-US Data Privacy Framework)
- • Cloudflare - CDN and image optimization (EU)
- • Google Analytics - Web analytics (USA - EU-US Data Privacy Framework)
- • PostHog - Product analytics (EU)
- • Sentry - Error monitoring (EU)
- • Resend - SMTP sub-processor used by Supabase Auth to deliver authentication emails (USA - EU-US Data Privacy Framework)
- • Stripe - Payment processing (USA - EU-US Data Privacy Framework)
Data Retention
We retain your data only as long as necessary.
- • Account data: retained while your account is active
- • Biometric data: automatically deleted after 90 days
- • Anonymous selfies: automatically deleted after 24 hours
- • Analytics data: retained for up to 26 months
Your Rights
Under GDPR, you have the following rights:
- • Right of access to your personal data (Art. 15)
- • Right to rectification of inaccurate data (Art. 16)
- • Right to erasure - right to be forgotten (Art. 17)
- • Right to restrict processing (Art. 18)
- • Right to data portability (Art. 20)
- • Right to object to processing (Art. 21)
- • Right to lodge a complaint with the CNIL (www.cnil.fr)
International Transfers
Your data may be processed on servers located in the European Union and the United States. Transfers to the USA are protected by the EU-US Data Privacy Framework (DPF). All sub-processors handling data outside the EU adhere to Standard Contractual Clauses (SCCs) or equivalent safeguards.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: privacy@pixload.io
Pixload Limited
Unit 2A, 17/F, Glenealy Tower
No.1 Glenealy, Central
Hong Kong S.A.R.