01Who we are
Pixaf is operated by the company named on the contact page, which is the controller of your personal data.
02What we collect
In short: Only what we need to run your account, licences and payouts.
- Account: name, email address, country, password (stored hashed), and the date you accepted our terms.
- Marketing consent: only if you opt in; you can withdraw at any time.
- Licences: for every download we keep the licence ID, the asset, your name as licensee, the project name you entered and the date — this record is permanent because licences are perpetual.
- Uploads (creators): the files, metadata you provide, and technical data read from the file (for example dimensions and camera information).
- Usage events: views and downloads, with the IP address replaced by a salted, truncated one-way hash that changes daily.
- Security log: privileged staff actions are logged with the staff member and IP address.
03Why we use it
- To provide your account, downloads, licences and certificates (contract).
- To pay creators and keep financial records (legal obligation).
- To keep the service secure and prevent abuse, e.g. rate limits (legitimate interest).
- To send optional news only when you opted in (consent).
04Sharing
We do not sell personal data. We share it only with service providers that host and run Pixaf, under contract, and when the law requires it. The public licence verification page shows the licensee name — never the project name.
05Retention
Account data is kept while your account is open. Licence records are kept permanently so licences can always be verified. Usage events are aggregated; the hashed identifiers cannot be reversed.
06Your rights
In short: You can access, correct, export or delete your data.
Depending on where you live you have rights to access, correct, delete, restrict or export your data and to object to processing. Contact us through the contact page. You can also complain to your data-protection authority.