Privacy policy
Effective October 27, 2026
This policy explains what Pixel Keepsake collects, why, who it's shared with, and your choices.
Your photos, in short
- Used for one thing: making your portrait. Never for AI training, marketing or anything else.
- Only you can see them, through a private link only you have.
- Deleted automatically within 30 days, along with every preview made from them. Our storage system enforces this; nobody has to remember to do it.
- Location data removed: your browser strips photo metadata, including GPS, before upload.
- What we keep if you order: the pixel portrait you ordered (not your photo), so we can reprint it if a frame arrives damaged.
- Sharing is your choice: if you tap Share, we make a separate link that shows only your pixel portrait (never your photo) to anyone you send it to. It's hidden from search engines, and for portraits you haven't ordered it stops working when your photos are deleted.
What we collect
| Information | Why | How long |
|---|---|---|
| Photos you upload, and the portraits made from them | To create and show you your portrait | Deleted within 30 days; the approved portrait of a paid order is kept for reprints |
| Name, shipping address, email, phone (entered at checkout) | To fulfill, ship and support your order, and for tax records | 7 years |
| Payment details | Handled entirely by Stripe; we never see your full card number | Per Stripe's policy |
| IP address and browser type | Security, preventing abuse, and measuring our ads (see below) | Up to 30 days with your order; a one-way hash of your IP is used for daily rate limits |
| Cookies (see below) | Remembering which prices you were shown, and ad measurement | Up to 30 days for ours |
Who we share it with
We don't sell your information. We share it only with the companies that run the service for us:
- Cloudflare: hosts the site and stores photos, portraits and order records.
- Replicate, and the image model it runs: receives your photos only to generate your portrait. Replicate automatically deletes each request's inputs, including your photos, and its results after one hour.
- Stripe: payments and sales-tax calculation.
- Printful: prints and ships your order; receives your name, shipping address, email, phone and the approved print file.
- Resend: sends your order confirmation and shipping emails.
- Meta (Facebook/Instagram): measures our ads (see below).
Ads and cookies
We use the Meta Pixel and Meta's Conversions API to measure our ads: they record when someone views a preview, starts checkout, or buys, with the order value. For purchases, a hashed (scrambled) version of your email, ZIP code and state, your IP address and browser type are sent so Meta can match the purchase to the ad. Meta sets its own cookies (_fbp, _fbc). Our own cookie, pk_arm, remembers which prices you were shown for 30 days.
Opting out: if your browser sends a Global Privacy Control signal, we don't load the Meta Pixel and don't send your activity to Meta. You can also block cookies in your browser, or adjust your ad preferences in your Meta account.
Order emails (confirmation, shipping) go to everyone who orders. If you ask us to email you your preview, we send that one email and keep the address with your preview, deleted with it after 30 days.
Marketing email (a reminder about your preview, our Christmas order deadline, and occasional offers or new products) goes only to people who tick a separate box for it, on the preview page or at checkout. We keep that address until you unsubscribe; every marketing email has a one-click unsubscribe link, and unsubscribing is permanent. We never sell or share the list.
Featured portraits
After ordering you can choose to let us feature your pixel portrait in our gallery and ads. That covers the portrait and an optional caption you write, nothing else: never your photo, name, email or address. You can withdraw from your order page at any time.
Children
Our site is for adults. Parents and guardians may upload photos of their children to make a portrait; those photos are handled exactly like any other (deleted within 30 days). We don't knowingly collect personal information from children under 13.
Your choices and rights
You can ask us to delete your photos sooner, delete your order information (where we don't need to keep it for tax or legal reasons), or tell you what we hold about you. Email hello@getpixelkeepsake.com with your order link. Depending on where you live, you may have further rights under state privacy laws; we'll honor them.
Changes and contact
We'll update the date above when this policy changes. Questions: contact us.