Privacy Policy
Last updated: October 3, 2026
🔒 The most important part: your files are never uploaded to a server
Almost every tool on Pixebag (background removal, image upscaling/compression, PDF editing, format conversion, DTP Studio, and others) processes your photo or document entirely in your own browser and never sends it to our servers. Once you upload a file into a tool, it never leaves your device.
The one exception happens only with your explicit consent: in Background Remover, if you're unhappy with a result and choose a reason why, you're asked "do you allow us to use this image to improve the model?" Only if you deliberately click "I allow it" is that specific image pair (before/after) uploaded to a separate, non-public storage bucket. This is off by default and never triggered without your explicit action.
We don't use your files for advertising, and we never sell or share them. The images and documents you process in our tools are not used to train AI; the only exception is the step described above, which happens solely with your explicit permission.
1. What we actually collect when you create an account
If you create an account or upgrade to Premium, we store the following with our database provider (Supabase) — don't assume we collect anything not listed here; this list reflects the fields that genuinely exist in our codebase:
- Your email address (when you sign up with email/password or Google)
- Your subscription status and plan (active/cancelled, renewal date)
- Your customer and subscription IDs at Paddle (see below)
- Any credit/coupon balance you've purchased
- Star ratings you give to tools
- Satisfaction feedback you give on Background Remover results (👍/👎 and an optional reason) — this does NOT include your image, just a satisfaction record
2. Payments
Your payments are processed not by us directly, but by our authorized reseller (merchant of record), Paddle.com Market Limited. Your card details never reach us — Paddle only tells us the result of a transaction (success/failure, subscription ID, status). Paddle's own privacy policy is available at paddle.com.
3. Third-party services we use
- Supabase — account/authentication and the database that stores the data listed above
- Paddle — payment processing (see above)
- Google AdSense — to show ads on the site. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising inGoogle Ads Settings, and out of other vendors' cookies ataboutads.info. How Google uses data:policies.google.com/technologies/partner-sites. Ad providers have no access to the files you process in our tools; the files never leave your device.
- Cloudflare Web Analytics — aggregate traffic measurement (page views, countries, browsers). Per Cloudflare's own documentation, this service does not use cookies or localStorage and does not "fingerprint" individuals via IP address, User Agent string, or any other data — see Cloudflare's Web Analytics page for details.
See our Cookie Policy for the full list of cookies and similar technologies we use.
4. How your data is protected
Your account data is protected in Supabase's database with row-level security (RLS) — by default, only you can access your own data. Your payment information never enters our systems at all; it's processed directly on Paddle's PCI-compliant infrastructure.
5. Your rights
You can request a copy of the data associated with your account, or request that your account and associated data be deleted. Just reach out to us at the address below.
EEA, UK and Switzerland: before any advertising cookies are set, you are shown a consent message where you can accept or refuse them. You can change your choice at any time via the privacy settings link shown on the site.
US state privacy rights (e.g. California, Colorado, Connecticut, Virginia): we do not sell your account data, and the files you process never leave your device. Ad cookies used by our advertising partners may count as "selling" or "sharing" under these laws. If you are in one of these states, a "Do Not Sell or Share My Personal Information" link appears at the bottom of the page; opting out there stops your information from being used to personalise the ads you see on Pixebag. You can also contact us at the address below to exercise your rights to know, correct or delete your data. We will not treat you differently for using these rights.
6. Contact
For questions about this policy: yasarsallibas@gmail.com.
This policy may be updated to reflect genuine changes to our service — the date at the top of the page is updated whenever a meaningful change is made.
This page is a plain-language draft describing our actual data practices, not a substitute for legal advice. It has not been reviewed by an attorney; please consult one for your specific compliance needs before relying on it.