Pixseer privacy policy

1. Who is responsible

The data controller is:

We are a one-person business. There is no data team, no CRM, and no analytics warehouse. We have not appointed a data protection officer, because we are not required to.

2. The short version

• Pixseer is local-first. Your images, prompts, metadata, tags, notes, favourites and settings are stored on your computer. Core library browsing does not upload them to us. Optional services you choose, including AI backends and remote computers, are described in section 4.
• There are no accounts. You never create one, and we never hold a password.
• The app contains no analytics and no telemetry. The desktop app does not send us usage analytics, session recordings or crash reports.
• We never sell or rent personal data, and we do not use it for advertising or profiling.
• The app makes network requests in only a handful of situations, all listed in section 4. Three of them happen without you asking: the update check on start, the licence re-check on start, and a background prefetch of the help videos for your interface language a few seconds after launch.
• The website uses self-hosted, cookieless analytics. It sets no tracking cookies. The demo uses local storage for its functionality and your choices. See section 6.
• Your purchase is handled by Lemon Squeezy as merchant of record. They hold your payment details, not us. See section 5.

3. What stays on your computer and never reaches us

All of the following is stored locally, and none of it is transmitted to us:

The app uses the following folders for the current desktop releases. On Linux, $XDG_DATA_HOME defaults to ~/.local/share and $XDG_CACHE_HOME defaults to ~/.cache. On Windows, %APPDATA% and %LOCALAPPDATA% refer to your own user profile.

Paths below the app-data folder are relative to the platform row above. Windows accepts these paths with backslashes too. The system webview may also keep cookies and interface storage in its own per-user data directory; uninstalling the executable alone does not necessarily remove that data. Cloud-synced folders and backups you configure are managed by your operating system or backup provider, not by Pixseer.

The library index is a cache. Every row can be rebuilt from your files, so deleting it loses nothing but time.

4. When the app talks to the internet, and what it sends

Requests go directly from your computer to the named service. Our update and help files are served from our Cloudflare-backed download domain; third-party lookups and AI requests are not relayed through a Pixseer content server. As with any internet request, the service you contact necessarily sees your IP address.

5. Buying Pixseer

Purchases go through our store on Lemon Squeezy, which acts as merchant of record. Lemon Squeezy is operated by Sold through Link, LLC (formerly Lemon Squeezy, LLC), a Stripe company, in the United States.

• Lemon Squeezy collects and processes your payment and billing details, determines and remits sales tax and EU VAT, issues the invoice, and holds the card data. We never see your card details. Their privacy policy and buyer terms govern that processing, and for the payment transaction they act as their own controller.
• We receive the order information we need to fulfil and support the sale: your name, your email address, your country and any tax number for tax purposes, the order and product identifiers, the amount paid, and your licence key and its activations. We access this in the Lemon Squeezy dashboard. We do not copy it into a database of our own.
• Their platform sends our website a webhook when an order is created or refunded, or a licence key is created. Our server verifies the signature and writes only the event name and its identifier to its log. It does not store your email address or any other order detail in an order database. On a refund, the handler also looks up and disables the order’s licence keys through Lemon Squeezy and logs the relevant identifiers and outcome.
• Lemon Squeezy processes data internationally, including in the United States. Its privacy policy describes where it processes data and the safeguards that apply to international transfers.

6. The website (pixseer.app)

7. Legal bases for processing (GDPR Article 6)

We do not rely on consent for anything the app does automatically, because nothing the app does automatically is optional tracking. We do not process special-category data, and we do not carry out automated decision-making that has a legal effect on you.

8. What we never collect

To be blunt about the things people usually worry about, we do not:

• collect, upload, scan, index or view your images, prompts, tags or notes;
• collect any analytics, usage statistics, feature counters, session recordings or crash reports from the app;
• collect a hardware fingerprint, advertising identifier, MAC address or serial number;
• collect your file names, folder paths or library size;
• collect the contents of your AI prompts or AI responses;
• hold your card number, IBAN or full billing address;
• hold a password of yours, because there is no account;
• store the name or email address that the licensing provider returns to the app;
• use cookies for tracking, on the website or anywhere else;
• sell, rent, share or trade personal data, or run advertising;
• use your data to train any AI model.

If we ever want to add optional diagnostics, it will be opt-in, clearly described, and this policy will be updated before the feature ships.

9. Who else is involved

The parties involved depend on which features and platform you use:

We have not appointed any of them as a processor acting on our behalf for your app content, because none of them receives your app content from us.

10. How long things are kept

• On your computer: for as long as you keep it. Uninstalling Pixseer may leave app data, settings, webview storage and caches behind. To remove those, close Pixseer and remove the relevant folders from section 3, together with its webview storage. Your original images, exports, backups and any files in folders you chose remain separate. Deactivate the licence before uninstalling if you want to release its activation slot; deleting license.json alone does not deactivate the server-side record.
• Order and licence records: held at Lemon Squeezy for as long as they need them for accounting, tax and dispute handling. Any records we are legally required to retain are kept for the applicable accounting, tax or dispute-handling period; that period depends on the type of record.
• Support email: kept while we are helping you, and then for a limited period in case you come back to the same issue.
• Website analytics and server logs: kept only as long as we need them to operate and secure the site and to understand aggregate traffic.

If you want the exact retention period that applies to something of yours, ask at adam@admox.xyz and we will tell you.

11. Your rights

Under the GDPR you have the right to ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or transfer it, and to object to processing we base on legitimate interests. Where we ever rely on consent, you can withdraw it at any time.

Write to adam@admox.xyz and we will answer within one month. We may need to confirm you are the person the data relates to, usually by replying from the email address on the order.

Two practical notes:

1. Because Pixseer stores your content only on your computer, an access or deletion request to us is unlikely to produce much: we have your order and licence record and any emails you sent, and little else. You can delete the app-side data yourself at any time by removing the folders listed in section 3.
2. For payment and billing data, you may also need to contact Lemon Squeezy directly, since they hold it as merchant of record.

You may complain to a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). You may also complain to the authority in your own EU country.

12. Children

Pixseer is not aimed at children and is intended for people old enough to buy software and to be responsible for the content they choose to manage with it. We do not knowingly collect data from children.

13. Security

Licence keys and connected-site tokens are stored locally; local storage is not a promise of encryption. On macOS and Linux, Pixseer attempts to restrict the licence file to its owner with 0600 permissions. On Windows, access follows the permissions inherited from your user-profile folder; Unix mode bits do not apply. Keep your operating-system account and backups secure.

Apple signing, notarisation and the hardened runtime apply to the macOS build only. They are not Windows or Linux security certifications. The in-app updater verifies its signed update artifacts before installation; this is separate from operating-system installer signing and does not describe manually installed Linux packages. Our website webhook verifies its signature with a constant-time comparison before handling events.

14. Changes to this policy

We may update this policy. The date at the top changes when we do, and material changes will be announced on the website and, where relevant, in the app. The current version is always on this page.

15. Contact

ADMOX (Adam Havlíček), Czech Republic
Privacy and legal: adam@admox.xyz
Support: support@pixseer.app
Web: pixseer.app

Related documents: the licence agreement and the refund policy. The third-party notices ship in the app under About, Open-source licenses.