Privacy Policy

• 1. Who is responsible for your data
• 2. What we collect
• 3. Why we use it, and on what legal basis
• 4. Screenshots of the sites you watch
• 5. Who else processes it
• 6. Transfers outside the EEA
• 7. How long we keep it
• 8. Cookies and local storage
• 9. Your rights
• 10. Security
• 11. Children
• 12. Changes to this policy
• 13. Contact

1. Who is responsible for your data

Pixelsitter is operated by Josip Rajković s.p., a sole proprietorship registered in Slovenia. For the personal data described below, we are the data controller under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

Josip Rajković s.p.
Zelena pot 3, Šmarca
1241 Kamnik, Slovenia
VAT identification number: SI30631564
Email: hello@pixelsitter.com

We are not required to appoint a Data Protection Officer. Privacy questions go to the address above and are answered by a person, not a queue.

2. What we collect

Data you give us

• Account data — your name, email address and a hashed password. We never store your password in a readable form.
• Site data — the domains and URLs you ask us to watch, the DNS TXT record used to verify them, your capture schedules, breakpoints, thresholds, and the baselines you approve.
• Notification settings — the email addresses that alerts go to and, if you connect one, the Slack workspace and channel.
• Billing data — your plan, billing interval, billing name and address, VAT identification number if you give one, and invoice history. Card details are entered on Stripe's own pages and never reach our servers; we hold only a Stripe customer identifier and the last four digits and card brand as Stripe reports them.
• Anything you write to us — the content of support emails and the address they come from.

Data produced by using the service

• Captures and diffs — screenshot images of the pages you watch, the pixel-difference images computed between them, and the numbers derived from those comparisons. See section 4.
• Scan metadata — timestamps, HTTP status codes, page load results, breakpoint, change percentage, and errors encountered while capturing.
• Alert history — which alerts were sent, to which address, and when.

Data collected automatically

• Technical logs — IP address, browser user agent, requested URL, referrer and timestamp, recorded when you use pixelsitter.com or the app. These exist to keep the service up, to investigate errors and to detect abuse.
• Session data — see section 8.

We do not run advertising trackers, we do not build profiles for marketing, and we do not sell or rent personal data to anyone, ever.

3. Why we use it, and on what legal basis

Purpose	Data	Legal basis (GDPR Art. 6)
Creating and running your account; capturing, comparing and storing your pages; sending alerts and reports	Account, site, capture, scan and alert data	Performance of a contract — Art. 6(1)(b)
Taking payment, issuing invoices, keeping accounting records	Billing data	Contract — Art. 6(1)(b); and legal obligation — Art. 6(1)(c), Slovenian tax and accounting law
Service emails you cannot opt out of while you hold an account (password resets, quota and billing notices, security notices, material changes to these terms)	Account data	Contract — Art. 6(1)(b)
Support correspondence	Whatever you send us	Contract, or legitimate interest — Art. 6(1)(f)
Keeping the service secure and available; debugging; preventing abuse and fraud	Technical logs, scan metadata	Legitimate interest — Art. 6(1)(f)
Product news or tips, if we ever send them	Email address	Consent — Art. 6(1)(a), withdrawable at any time by the unsubscribe link
Defending or bringing legal claims	Whatever is relevant	Legitimate interest — Art. 6(1)(f)

Where we rely on legitimate interest we have weighed it against your interests and use the least data that achieves the purpose. You can object to that processing — see section 9.

4. Screenshots of the sites you watch

Pixelsitter works by loading the URLs you give it in an automated browser, as any visitor would, and storing the resulting images. It uses no credentials and no CMS or hosting API, so it only ever sees what a member of the public sees.

Those images can nevertheless contain personal data — a team page with names and photographs, a testimonial, a comment thread, an author byline. When that happens:

• You are the party who decided that those pages should be watched, and you are the controller of the personal data they contain. We process it on your behalf as a processor, only to produce comparisons and alerts for you, and never for our own purposes.
• You confirm that you are entitled to have the pages captured — that you own them, administer them, or have permission from whoever does.
• Do not point Pixelsitter at pages behind a login, at checkout or account pages, or at any page whose content should not be stored as an image. It is not built for that, and section 4 of the Terms forbids it.
• Section 8 of the Terms sets out the processing terms that govern this arrangement. If your organisation requires a separate signed data processing agreement, write to us and we will sign one.

5. Who else processes it

We keep the list of companies involved in running Pixelsitter as short as we practically can. Each one processes data only on our instructions, under a contract that meets Art. 28 GDPR.

Processor	What it does	Where
Stripe Payments Europe, Ltd.	Payments, cards, invoices, the billing portal	Ireland, with Stripe, Inc. in the United States
Hetzner Online GmbH	The servers that run the application and hold its database	Falkenstein, Germany
Cloudflare, Inc. (Cloudflare R2)	Object storage holding your captures and diff images	Bucket located in the European Union; Cloudflare is established in the United States
Amazon Web Services (Amazon SES)	Delivery of alerts, reports and account email	European Union, with Amazon Web Services, Inc. in the United States
Slack Technologies Limited	Only if you connect Slack: delivery of alerts to your channel	Ireland, with Salesforce, Inc. in the United States
Bunny.net (BunnyWay d.o.o.)	Serving the webfonts on pixelsitter.com; it sets no cookies	Slovenia

We will also disclose data where the law requires it — to a court, tax authority or other public body acting within its powers. If Pixelsitter is ever sold or transferred, your data moves with it and you will be told before that happens, with time to close your account and export what is yours.

6. Transfers outside the EEA

Your account data and database live on servers in Falkenstein, Germany, and your captures in a Cloudflare R2 bucket located in the European Union. Day to day, the data stays inside the EU.

Three of the providers above — Cloudflare, Amazon Web Services and Stripe — are groups with a US parent that may access data for support, security or infrastructure reasons. Those transfers are covered by the European Commission's Standard Contractual Clauses in each provider's data processing addendum, together with the EU–US Data Privacy Framework where the recipient is certified under it, and by the supplementary measures those addenda require. Ask us and we will tell you which mechanism applies to a given provider.

7. How long we keep it

• Captures, diffs and scan history — for the history window of your plan, currently 7 days on Free, 1 month on Solo, 3 months on Agency and 1 year on Studio. Older captures are deleted automatically. Approved baselines are kept for as long as the site is in your account, because comparison depends on them.
• Account and site data — while your account is open. Delete a site and its captures go with it. Close your account and we delete or irreversibly anonymise your account, site and capture data within 30 days, except where a point below requires otherwise.
• Invoices and accounting records — for the period Slovenian tax and accounting law requires, which is up to 10 years. This is a legal obligation and it survives account deletion.
• Technical logs — normally up to 90 days, longer for a specific record kept as evidence of an incident.
• Support email — up to 24 months after the conversation ends.
• Marketing consent records — until you withdraw consent, plus the period needed to show that the consent existed.

8. Cookies and local storage

This marketing site sets no cookies at all. It stores one value in your browser's local storage, theme, which remembers whether you chose the light or dark appearance. That is a preference you set yourself, it never leaves your browser, and clearing site data removes it.

The application at app.pixelsitter.com sets cookies that are strictly necessary to run it: a session cookie that keeps you logged in, and a CSRF token cookie that protects forms from cross-site request forgery. Neither is used for analytics or advertising, so under the EU ePrivacy rules and Slovenia's ZEKom-2 they need no consent banner. Blocking them means you cannot log in.

9. Your rights

Under the GDPR you may ask us to:

• Give you access to the personal data we hold about you, and a copy of it (Art. 15).
• Correct anything inaccurate or incomplete (Art. 16).
• Delete it, where we have no overriding obligation to keep it (Art. 17).
• Restrict processing while a dispute about accuracy or lawfulness is resolved (Art. 18).
• Port it — receive the data you gave us in a structured, machine-readable format, or have it sent to another provider (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time, where consent is the basis. Withdrawal does not affect processing that already happened (Art. 7(3)).

Write to hello@pixelsitter.com. We answer within one month, and tell you if a complex request needs longer. There is no charge unless a request is manifestly excessive or repetitive. We may need to confirm who you are before we hand over data.

You can also complain to the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, ip-rs.si, or to the authority where you live or work. We would rather you told us first and gave us the chance to fix it.

We take no decisions about you by automated means that have a legal or similarly significant effect on you.

10. Security

Traffic is encrypted with TLS. Passwords are stored as salted hashes. Data at rest sits on encrypted volumes. Access to production systems is limited to the people who need it, protected by multi-factor authentication, and backups are taken regularly and tested.

No system is perfect and we will not pretend otherwise. If a breach occurs that is likely to put your rights at risk, we will notify the Information Commissioner within 72 hours as Art. 33 requires and tell you directly without undue delay, with what we know and what we are doing about it.

11. Children

Pixelsitter is a tool for professionals and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.

12. Changes to this policy

As the product changes, this policy will too. The date at the top always reflects the current version. If a change materially affects how we handle your data, we will email account holders at least 30 days before it takes effect, so you have time to look at it and decide whether to stay.

13. Contact

Any question about this policy, any request under section 9, or any concern about how your data is handled: hello@pixelsitter.com. You will hear back within one working day.

See also the Terms of Service.