Privacy Policy
Last updated: March 2026
Data Collection
LocalPix processes all image conversions directly in your browser. We do not collect, store, or transmit any files you convert. Your images never leave your device.
Account Data
If you create an account via Google Sign-In, we store your email address, display name, and subscription status. This data is stored securely in Firebase Firestore.
Analytics
We use Google Analytics (GA4) to collect usage statistics such as pages visited, conversion formats used, and interaction patterns. Google may collect your IP address. Analytics is only activated after your explicit consent. You can revoke consent at any time via "Manage Cookie Preferences" in the site footer.
Third-Party Services
We use Firebase (authentication and data storage), Stripe (payment processing), and Google AdSense (advertising for free users). Each service has its own privacy policy.
Payment Processing (Stripe)
Payments are processed by Stripe, certified PCI-DSS Level 1. Stripe collects your name, email, and payment information directly on their secure servers. LocalPix never stores, processes, or has access to your credit card data. We only store a Stripe customer identifier to manage your subscription. See: https://stripe.com/privacy
International Data Transfer
Your data may be processed outside your country of origin: Firebase Authentication and Firestore (Google Cloud Platform, US servers), Stripe (US and European servers), and Google Analytics (Google's global servers). We use providers that adhere to recognized international transfer frameworks (EU-US Data Privacy Framework, Standard Contractual Clauses). The Google Cloud Data Processing Addendum (DPA) has been accepted for our Firebase project.
Your Rights
Under LGPD, GDPR, and CCPA, you have the right to: access your personal data; rectify incorrect data; request complete deletion of your account and data; export your data in a machine-readable format (portability); withdraw consent for data processing; and restrict how your data is processed. To exercise any right, access your Account Settings or contact us at [email protected]. We respond to all requests within 15 business days.
Data Retention
Account data is retained while the account is active. After deletion, data is removed from all systems within 30 days. Server logs are retained for 90 days, then automatically deleted. Rate limiting counters are stored in memory and expire within 24 hours. Payment data is managed by Stripe according to their retention policy. Anonymized analytics data is retained for 14 months (GA4 configuration).
Local Storage & Cookies
We use browser local storage for essential functionality. Functional items (always active): lp_auth (login flag), lp_locale (selected language), lp_locale_manual (manual language selection), lp_limits (daily conversion counter), lp_banner_dismissed (language banner state, session only). Analytics cookies (require consent): Google Analytics identifiers (_ga, _gid). Advertising cookies (require consent): Google AdSense personalization cookies.
Contact
For privacy-related questions, contact us at [email protected].