Last updated: 29 August 2026 · Contact: ipassas.design@gmail.com

The short version

Your photos never leave your device. All image processing happens inside your browser. We store your account email, your access pass and remaining generation balance, your payment history, your star votes on shared pieces, for each image you trace a small thumbnail plus the settings you used, any painter profile you choose to publish (name, nickname, gallery title, intro text, avatar, all public and all optional), and, if you joined through an invite link, which account invited you (used only to credit their invite rewards). That is the whole list. Deleting your account from the profile page removes all of it.

What we process and why

• Photos. Processed entirely in your browser. They are never uploaded to our servers and we cannot see them.
• Account data. Your email address and a hashed password (or your Google sign in), stored with Firebase Authentication (Google Ireland Ltd), to run your account. Legal basis: performance of contract.
• Access and history. Your pass, your remaining generation balance and, per traced image, a thumbnail of at most a few kilobytes, the file name, the settings and the colour palette, stored in Cloud Firestore, so your history follows your account. Legal basis: performance of contract.
• Payments. Handled by Stripe Payments Europe Ltd. We never see or store card or PayPal details; we receive only a confirmation that a purchase succeeded and which pack it was. Legal basis: performance of contract and legal obligations (bookkeeping).

The public wall

If, and only if, you tick the consent box and share a template on the public wall, we store and publicly display a mid-resolution preview of the generated template (not your original photo), its name, its palette and its settings, so other users can view it and reuse it. This is based on your consent, which you can withdraw at any time by taking the piece down from your shelf; the entry is then deleted immediately. Nothing is ever shared without that explicit action.

What we do not do

• No advertising, no tracking pixels, no analytics that profile you.
• No selling or sharing of personal data with third parties beyond the processors named above.
• No storage of your photos, ever.

Retention

Account data and history live as long as your account does. Delete a history entry and it is gone immediately. Ask us to delete your account and everything except records we must keep for tax law is removed within 30 days.

Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing. Email ipassas.design@gmail.com and we will act within 30 days. You can also complain to your local data protection authority.

Processors

Google (Firebase Authentication, Cloud Firestore, hosting) and Stripe (payments). Both process data under their own GDPR commitments and standard contractual clauses where applicable.