Privacy Policy

pixi.love is run by Quorvel Digital LLC, a Wyoming, United States limited liability company ("we", "us"). This policy explains what we collect when you use the site, why, and what you can ask us to do with it. We keep it short because we collect very little.

• Account details. Your email address and a password. The password is handled by our login provider and stored only as a secure hash. We never see it.
• What you put in a card. The names, messages and other text you type, and any photos you upload.
• Order details. Which card you bought, the amount, the date, whether it was paid or refunded, and Stripe's reference numbers. Stripe handles your payment card. We never receive or store the card number.
• Technical data. Our hosting provider logs basic request details, such as IP address, browser type and the pages requested, to keep the site running and secure.

We don't use analytics tools, ad trackers or tracking pixels.

• to build your card and show it to people who open its link
• to take payments, issue refunds and keep order records
• to log you in and let you reset your password
• to answer your messages and help with problems
• to stop fraud, spam and cards that break our terms
• to meet tax, accounting and other legal duties

We don't sell your data, share it with advertisers, or use your photos or messages for anything besides your card.

Anyone with your card's link can open it. Links use a long random code, so they can't be guessed, and cards aren't listed or searchable anywhere on the site. Photos you upload are kept in private storage and are only shown through the card.

Our team can view cards when it's needed for support, refunds or checking a report of abuse.

• Stripe processes payments and sends payment receipts.
• Supabase hosts our database, stores photos, handles logins and sends password reset emails.
• Vercel hosts the website.

Each one only gets what it needs to do its job and has to protect it. They may process data in the United States and other countries. We may also share information if the law requires it, to protect people from harm, or as part of selling or merging the business.

We use only the cookies the site needs to work: one keeps you logged in, and our payment page (run by Stripe) sets its own to prevent fraud. There are no advertising or analytics cookies, so there's nothing to opt out of.

• Unpaid drafts, including their photos, are deleted automatically after 7 days.
• Paid cards and their photos stay for as long as your account exists, so the link keeps working.
• When you delete your account, we delete your cards and photos within 30 days.
• Order records are kept for as long as tax and accounting law requires, even after an account is deleted.

You can ask us for a copy of your data, to fix it, or to delete your account and cards. Email us from the address on your account and we'll reply within 30 days. Deleting a card switches its link off for everyone.

Depending on where you live (for example the EU, the UK or California), you may have extra rights, such as objecting to how we use your data or complaining to your local data protection authority. We don't sell or share personal information for advertising as those laws define it.

Everything travels over encrypted connections. Photos sit in private storage and passwords are hashed. No system is perfectly secure, though, so use a password you don't use anywhere else. If a breach affects your data, we'll tell you as the law requires.

pixi.love isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us personal information, email us and we'll delete it.

If we change this policy, we'll update the date at the top. If the change is significant, we'll say so on the site first.

Privacy questions or requests: oussama@pixi.love.