PixelkinPrivacy notice
We store almost nothing, and nothing that is not needed to run the tool. Last updated 6 October 2026.
Controller
[FULL NAME or COMPANY NAME], [STREET, POSTCODE, CITY], Estonia. Email: hello@kyrts.com.
What we process and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Your licence key and credit balance | Delivering what you bought | Contract (Art. 6(1)(b) GDPR) | Until the key is used up or you ask for deletion; refunds need it for 14 days |
| Order id, product, amount, Polar customer id (from Polar's webhook) | Attaching credits to the right key, refunds, bookkeeping | Contract; legal obligation (accounting) | 7 years (Estonian accounting law) for order records |
| Your prompts and the draft images | Showing you the drafts, abuse review | Contract; legitimate interest (abuse prevention) | 30 days, then deleted automatically |
| A hashed, daily-rotating form of your IP address | Limiting free previews and refunds per visitor | Legitimate interest (keeping the free tier free) | The hash is only meaningful for one day; rows are purged after 30 days |
| Emails you send us | Answering you | Legitimate interest | Until the matter is closed, at most 2 years |
We do not store your email address, name or payment details. Polar does, as the seller of record, under its own privacy policy. Images you convert with the free converter never leave your browser.
Cookies
One cookie, pk, holds your signed licence key so you do not have to paste it on every visit. It is strictly necessary for the service you asked for, so no consent banner is required (ePrivacy Directive Art. 5(3)). We use Cloudflare Web Analytics, which sets no cookies and does not fingerprint, to count page views.
Processors and transfers
Cloudflare, Inc. hosts the site, the database, the image storage and runs the AI model (Workers AI); Cloudflare's data processing addendum with EU standard contractual clauses applies, and Cloudflare states that Workers AI inputs and outputs are not used to train models. Polar Software Inc. (USA) processes payments as seller of record under its own terms. Data may therefore be processed outside the EU under those safeguards.
Your rights
Access, rectification, erasure, restriction, portability and objection, as applicable, by emailing hello@kyrts.com with your licence key (it is the only identifier we have). You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.
Children
The Service is not directed at children under 16, and payments require an adult.