Privacy Policy

This Privacy Policy explains how your personal data is handled when you use PicClip (picclip.app) and the viewer at viewer.picclip.app. We keep it short and plain.

1. Who is responsible

The data controller responsible for your personal data is:

VAT / registration number: to be added before launch.

2. What data we collect

We only collect what we need to provide the service:

• Account data — your email address.
• Uploaded content — the photos and videos you upload to create a PicClip project.
• Order data — the plan you bought and a payment reference. Payments are handled by Paddle; we never see or store your card details.
• Usage data — anonymous, aggregated page statistics (see §8). No tracking cookies, no advertising profiles.

3. Why we use it (legal basis)

• To provide the service — hosting your photos and videos, generating QR codes, and serving them in the viewer (Art. 6(1)(b) GDPR, performance of a contract).
• To take payment and meet tax obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
• To send you essential emails such as sign-in links and order confirmations (Art. 6(1)(b) GDPR).
• To understand aggregate usage of our site (Art. 6(1)(f) GDPR, legitimate interest in improving the service).

4. Where your data is stored

Your account data and all uploaded photos and videos are stored on servers located in the European Union (IONOS, Germany). Our landing page and viewer are static files delivered through a content delivery network; your personal media is only fetched from EU storage at the moment you view it, using short-lived signed links.

5. Sub-processors

We use a small number of trusted service providers to run PicClip. Each only processes the data needed for its role:

6. International transfers

Some providers (e.g. Cloudflare, Amazon Web Services) are based in the United States and may process limited data outside the EU. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard. Your uploaded photos and videos remain in the EU.

7. How long we keep it

Your project and its media are hosted for 5 years from the date of purchase, after which you may renew. If you delete your account or a project, the associated photos and videos are removed from our storage. We keep invoice and tax records for as long as the law requires.

8. Cookies and analytics

We do not use tracking or advertising cookies. For aggregate statistics we use Umami, which we run ourselves on our own server in Germany. It counts which pages are viewed, where visitors come from, their browser, device type and country, and clicks on buttons such as "Try it free". Umami sets no cookies, does not store IP addresses and does not follow you to other sites, so these numbers cannot be traced back to you. We may use a small number of strictly necessary cookies to keep you signed in.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• receive an export of your data in a portable format;
• correct data that is inaccurate;
• erase your data (right to be forgotten);
• restrict or object to certain processing;
• withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali.

10. Children

PicClip is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy as the service evolves. The "last updated" date above always reflects the current version, and we will notify account holders of significant changes.

12. Contact

Questions about your privacy? Email [email protected].