Privacy
What we keep, why we keep it, and who else touches it. Written from what the site actually does.
Who is responsible
Philipp Racher, In Kirchbergen 9, 2120 Wolkersdorf im Weinviertel, Austria — hello@go-pixel.me
What we hold, and what of it is public
Public, and stays public.The picture you upload, the message and the link you chose to show, and your spot's position and size on the frame. That is the point of the frame — anyone who visits go-pixel.me can see them, for as long as your spot exists.
Private, and never shown to anybody. Your email address, the price you paid, the time you confirmed you hold the rights to what you uploaded, and whether your picture was approved, rejected or is waiting on you to fix something.
Private, kept apart from everything else.If we ask for proof that you are allowed to publish your picture — a trademark certificate, a licence, someone's written consent to be shown — that document goes into a separate, non-public store from the one the board's images are served from. It is never published and is not shown alongside your spot.
Private, and never shown to anybody. Your email address, the price you paid, the time you confirmed you hold the rights to what you uploaded, and whether your picture was approved, rejected or is waiting on you to fix something.
Private, kept apart from everything else.If we ask for proof that you are allowed to publish your picture — a trademark certificate, a licence, someone's written consent to be shown — that document goes into a separate, non-public store from the one the board's images are served from. It is never published and is not shown alongside your spot.
Why we are allowed to
Everything above is needed to give you what you bought (Art. 6(1)(b) GDPR): the spot, the review, the confirmation, and telling you when a stage you are part of will be shown.
Announcements about the project beyond that go to our own customers under the existing-customer exception (§ 107(3) TKG 2021), and you can switch them off at any time — from the link in every mail we send, or by writing to us. Doing so never stops the mails about your own purchase; those are part of the contract, not marketing.
Announcements about the project beyond that go to our own customers under the existing-customer exception (§ 107(3) TKG 2021), and you can switch them off at any time — from the link in every mail we send, or by writing to us. Doing so never stops the mails about your own purchase; those are part of the contract, not marketing.
Who else processes it
Supabase, Inc. — the database, and storage for both the board images and the private proof documents, in two separate, differently secured buckets.
Vercel Inc. — runs the site and keeps server logs.
Plus Five Five, Inc., trading as Resend — sends our mail, EU region.
Stripe — handles payment. We never see or store your card details.
All four are based in the United States and process data under a Data Processing Agreement (Art. 28 GDPR). Where data leaves the EU, it does so under the EU–US Data Privacy Framework, the EU Standard Contractual Clauses, or both.
Vercel Inc. — runs the site and keeps server logs.
Plus Five Five, Inc., trading as Resend — sends our mail, EU region.
Stripe — handles payment. We never see or store your card details.
All four are based in the United States and process data under a Data Processing Agreement (Art. 28 GDPR). Where data leaves the EU, it does so under the EU–US Data Privacy Framework, the EU Standard Contractual Clauses, or both.
How long we keep it
Your picture, message and link stay up for as long as your spot exists — that is what you bought, and it is also the point below about what deleting your data actually does.
The record of your purchase — price, date, tax details — is kept for seven years after the year of purchase, the retention period Austrian tax law sets for business records (§ 132 BAO; § 18(10) UStG).
Proof-of-rights documents are kept for seven years from your purchase, or three years from the day your picture comes down, whichever is longer.
The record of your purchase — price, date, tax details — is kept for seven years after the year of purchase, the retention period Austrian tax law sets for business records (§ 132 BAO; § 18(10) UStG).
Proof-of-rights documents are kept for seven years from your purchase, or three years from the day your picture comes down, whichever is longer.
What you can ask for
A copy of what we hold, a correction, deletion, restriction, portability, and you can object to the announcements at any time. Write to hello@go-pixel.me. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde).
Deleting your data means taking your picture off the shared frame. The two cannot be separated — your picture, message and link on the board are the personal data, not a copy of it stored somewhere else. Asking us to delete one is asking us to delete the other, and once it is gone, the spot is gone with it.
This does not reach backwards. If your picture was already part of a stage that has already been shown — a broadcast, a livestream, a recording already sent out — deleting your data removes it from the frame going forward, but cannot recall a broadcast that already happened or recordings already sent to you and to other buyers.
Deleting your data means taking your picture off the shared frame. The two cannot be separated — your picture, message and link on the board are the personal data, not a copy of it stored somewhere else. Asking us to delete one is asking us to delete the other, and once it is gone, the spot is gone with it.
This does not reach backwards. If your picture was already part of a stage that has already been shown — a broadcast, a livestream, a recording already sent out — deleting your data removes it from the frame going forward, but cannot recall a broadcast that already happened or recordings already sent to you and to other buyers.
Cookies
No advertising cookies and no third-party tracking of our own. The site stores a key in your browser only if you use the admin area. Stripe sets a small number of cookies during checkout for fraud prevention — these are strictly necessary for making a secure payment and do not require separate consent.
Every announcement carries a link where you choose what to receive. See the terms for what a purchase includes.