Privacy

This statement describes which personal data we process when you use Pixanvas, why we do so and what rights you have. Last updated on 28 October 2026.

Who processes your data?

Pixanvas is a product of PixelOwners. The controller is BWEB, trading as PixelOwners, Leliestraat 76, 7514 XN Enschede, the Netherlands, Chamber of Commerce number 08092851. Questions about your data are welcome at [email protected].

What data do we process, and why?

When you order we ask for your email address. If you pay by iDEAL | Wero or PayPal, you buy directly from us and you can add billing details for the invoice: name, address and country, and your company name and VAT number if you want them on it. We need this data to perform the agreement with you and to issue an invoice that meets legal requirements. If you pay by credit card, Apple Pay, Google Pay or a similar method, Stripe sells you the pixels and asks on its own payment page for the details it needs; we do not ask you for billing details then.

When you sign in we use your email address to send you a login link and a login code, and we store a session token so you stay signed in. We do not use passwords, so we do not store any.

For reservations, sign-in attempts and discount code usage we record the IP address. This is stored encrypted, alongside an irreversible fingerprint that lets us recognise repeated abuse without having to read the address itself. The legal basis is our legitimate interest: protecting the canvas against abuse. When a visitor asks for a translation of a pixel, we record only that fingerprint, without the address itself, and for no longer than a day. It lets us count how many translations are requested from one place within an hour, so that a single visitor cannot drain the translation service’s monthly allowance.

The content of your pixels - the drawing or image, the title, the text and the link - is stored so it can be shown publicly, which is exactly what you are buying. Every change is kept as a version, so you can go back to an earlier state.

What is publicly visible?

What you put on your pixels is public, together with their coordinates and the date of the last change. Your name, email address and billing details are not. On the public verification page of a certificate we show only the initials of the name on that certificate, never the full name. In your pixel settings you also decide for yourself whether the title, the text, the link and the date are shown, and whether they get their own page.

Cookies and statistics

We only place functional cookies: for your cart, your sign-in session, your language choice, your choice of a light or dark theme, any discount code and short on-screen notices. Without them the site does not work properly. We do not use tracking or advertising cookies.

For visitor statistics we use our own installation of Umami, on our own server. Umami works without cookies, does not build profiles and shares nothing with third parties. Umami derives your country from your IP address and calculates a session marker from it whose value changes every hour; the address itself is not stored.

The translate button on a pixel sets no Google cookies. Your browser never contacts Google: every translation request goes through our own server. Which language you picked there is remembered by your browser for the length of your visit - that is not a cookie, and it disappears when you close the tab.

Who do we share data with?

Stripe handles all payments. We pass it your email address and what you are buying. If you pay by credit card, Apple Pay, Google Pay or a similar method, Stripe sells you the pixels as merchant of record, through its Link service: it collects the details that sale requires, such as your name, country and payment details, works out the tax and sends you the receipt. For that sale Stripe is itself responsible for your data, under the privacy policy of Stripe and that of Link. If you pay by iDEAL | Wero or PayPal, we are the seller and Stripe processes the payment for us; for its own legal obligations, such as preventing fraud, Stripe also uses that payment data under its own privacy policy. Either way you enter your payment details with Stripe, your bank or PayPal; they never reach us.

Cloudflare sits between your browser and our server: every visit to Pixanvas runs through its network, which protects the site against attacks and serves the canvas faster from a location near you. Cloudflare therefore processes your IP address and the technical details of each request, such as the address requested and your browser type.

Beyond that, we share data only with parties needed to deliver the service: our hosting provider, the party handling our outgoing email and Google Cloud Translation. When a visitor asks for a translation of a pixel, we send that pixel’s title, text and link label to Google Cloud Translation - content its owner published themselves. Nothing about the reader travels with it, not even their IP address: the request comes from our server. With Cloudflare and these parties we set out in a data processing agreement how they must handle your data. Stripe, Cloudflare and Google are American companies; where data leaves the European Economic Area as a result, this happens under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell your data and do not use it for advertising. Where the law requires us to hand over data, we do.

How long do we keep data?

Invoices and the data belonging to them are kept for seven years, as Dutch tax law requires. The same goes for the details of orders Stripe sold you - what, when and for how much - because they are part of our accounts. Your account and pixel data are kept for as long as your pixels are on the canvas. Login links and codes expire after 15 minutes and cart reservations after 30 minutes; both are cleaned up afterwards. Data about sign-in attempts is kept no longer than needed to prevent abuse.

Your rights

You may access your data, have it corrected or erased, have its processing restricted, object to processing based on legitimate interest, and request your data in a common file format. Email [email protected] and we will respond within one month. Please note that we cannot erase invoice data while the statutory retention period is running. For the data Stripe keeps about a purchase sold through Link, you can also turn to Stripe directly.

If you feel we are not handling your data properly, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your own country.

Security

All traffic with the site runs over an encrypted connection. IP addresses are stored encrypted. Payments take place entirely at Stripe. And because we do not use passwords, there is no password here to steal.

Changes

When the service changes, we update this statement. The date at the top of this page shows when that last happened. If a change is significant, we will let you know at the email address you ordered with.