Privacy policy
What the extension collects
Nothing about you, and nothing about what you watch. Pxlate has no analytics, no telemetry, no crash reporting, no update pings, and no remotely loaded code. The face and body detection models ship inside the extension package and run on your own hardware, so the video you are watching never leaves the tab it is playing in.
What Pxlate stores, it stores locally through the browser's own extension storage:
- Your zones and settings in
chrome.storage.local, which never leaves the device. - Your license state (key, activation ID, activation date) in
chrome.storage.sync, which Chrome carries between browsers signed into the same profile. That sync is Google's, running under your own account, and Pxlate never sees it.
Pxlate keeps no history: not the pages you visit, not the media you censor, not what your zones covered. Uninstalling removes the local storage with it, and you can clear it any time from the panel or your browser's extension settings.
The extension makes exactly one outbound request, and only when you click
activate or deactivate in the Pro dialog: a license call to
api.lemonsqueezy.com. Activation sends your license key and a
randomly generated instance name such as Pxlate-k4m2p9, with no
hostname, operating system, or username in it. Deactivation sends the key and
the activation ID so the seat can be released. No page URL, no browsing data,
no zone data, no usage counters. The result is stored locally and never
re-checked, and on the free tier the extension makes no network requests at
all. That exchange performs the license contract with you
(Art. 6 (1)(b) GDPR).
Pxlate requests access to a website only when you first use it there, never on install, and you can revoke that in your browser's extension settings. To censor an image or video at full quality it sometimes loads that same file a second time, because a browser will not let an extension read pixels it did not fetch itself. That request goes to the site you are already on, for the one item you picked, and no copy of your media is uploaded anywhere.
Buying and activating Pro
Pxlate Pro costs $19.99 once. The purchase is handled by LemonSqueezy (Lemon Squeezy LLC, United States) as merchant of record.
What you enter at checkout, including your email address, billing details, and payment method, is collected and processed by LemonSqueezy under their own privacy policy. We receive the order and the license key, never your card details. Because LemonSqueezy is based in the United States, purchase data is transferred there, safeguarded by the standard contractual clauses and the transfer mechanisms set out in their agreements. All of it is processed to perform the purchase contract with you (Art. 6 (1)(b) GDPR).
This website
pxlate.app is a static site. It runs no JavaScript, sets no cookies, and embeds nothing from anyone else: no analytics, no tracking pixels, no third-party fonts. The two typefaces are served from this domain.
What remains is the ordinary server log the hosting provider keeps whenever any page is served: IP address, time of the request, the file requested, referrer, and browser user agent. These logs exist to keep the site running and secure, which is our legitimate interest in it (Art. 6 (1)(f) GDPR). They are not used to profile anyone and not combined with any other data source.
Hosting provider: Hostinger International Ltd., Larnaca, Cyprus (EU), acting as a processor under a data processing agreement pursuant to Art. 28 GDPR.
If you write to info@pxlate.app, your message and your address are processed in order to answer you. Support threads are answered directly and are not fed into a ticketing system, CRM, or mailing list. Answering you is either part of our contract with you or our legitimate interest in replying (Art. 6 (1)(b) and (f) GDPR).
How long anything is kept
- Zones, settings, license state. On your device, for as long as you keep them. Deleting them or uninstalling the extension ends it.
- License records. For as long as the license is valid, plus the retention periods German commercial and tax law imposes on business records, which run to six and ten years depending on the document.
- Server logs. Kept briefly by the hosting provider for security and diagnostics, then deleted or anonymised.
- Email. As long as the conversation needs it, then deleted, subject to the same statutory periods where a message is a business record.
Your rights
Under the GDPR you can ask for access to your data (Art. 15), correction of it (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and a portable copy (Art. 20). You can object to processing based on legitimate interest at any time (Art. 21). Write to info@pxlate.app.
You also have the right to complain to a supervisory authority (Art. 77 GDPR). The competent one here is the Hessian Commissioner for Data Protection and Freedom of Information, in Wiesbaden, Germany. You may also complain to the authority where you live or work.
Who is responsible
Controller within the meaning of Art. 4 (7) GDPR, for both pxlate.app and the Pxlate browser extension, is the provider named in the legal notice, reachable at info@pxlate.app.
No data protection officer has been appointed; the thresholds under Art. 37 GDPR and German federal data protection law are not met. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.