Privacy policy

1. Who we are

FlossPixel ("we", "us") operates the website flosspixel.com and the FlossPixel pattern maker. We are based in Singapore. This policy explains what personal data we collect, why, and what rights you have. Questions can be sent to privacy@flosspixel.com.

2. The short version

• Direct photo-to-pattern conversion runs entirely in your browser. Your photo is never sent to us.
• We do not require an account to use the free converter.
• If you use AI features, your image or prompt is sent to the AI provider to generate a result and is not retained by us afterwards.
• We use minimal, privacy-respecting analytics and no advertising trackers.

3. Data we process

3.1 Direct conversion (no account)

Images you load are decoded and processed on your device. We never receive, store or see them. Chart settings are held in your browser's local storage so you can pick up where you left off, and can be cleared at any time.

3.2 Accounts and credits

If you buy AI credits we collect your email address, a hashed password or sign-in token, your credit balance and a transaction history. Payments are handled by a third-party payment processor; we receive a confirmation and the last four digits of a card, never the full card number.

3.3 AI features

When you request an AI redraw or text-to-pattern generation, the source image or text prompt is transmitted over an encrypted connection to the selected model provider (currently the providers of Nano Banana 2 and GPT Image 2) solely to produce your result. We do not use your images or prompts to train models. Generated results are delivered to your browser and are not kept on our servers beyond the time needed to return them.

3.4 Contact and support

If you write to us we keep the correspondence for as long as needed to resolve your query and for a reasonable period afterwards for record-keeping.

3.5 Technical data

Our servers and analytics record standard technical information such as browser type, approximate region derived from IP address, pages visited and referring site. IP addresses are truncated before storage.

4. Why we process data

We rely on the following bases: performance of our contract with you (providing accounts, credits and AI features); our legitimate interests (keeping the service secure, understanding aggregate usage, responding to enquiries); and your consent where required, for example for optional cookies.

5. Sharing

We share data only with service providers who help us run FlossPixel — hosting, payment processing, email delivery, analytics and the AI model providers named above — each bound by contract to use it only for that purpose. We do not sell personal data. We may disclose data where required by law.

6. International transfers

Our providers may process data outside Singapore, including in the United States and the European Economic Area. Where we transfer personal data we use appropriate safeguards such as contractual clauses.

7. Retention

Account data is kept while your account is active and for up to 12 months after closure, except transaction records which we retain for 7 years to meet accounting obligations. Support correspondence is kept for up to 24 months. Technical logs are kept for up to 90 days.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Singapore residents have rights under the Personal Data Protection Act 2012; EEA and UK residents have rights under the GDPR and UK GDPR. To exercise any right, email privacy@flosspixel.com. You may also complain to your local data protection authority.

9. Children

FlossPixel is not directed at children under 13, and we do not knowingly collect their personal data. Accounts require users to be at least 18 or to have parental consent.

10. Security

All traffic to flosspixel.com is encrypted. Account credentials are stored hashed. Access to production systems is limited to staff who need it. No system is perfectly secure; if we become aware of a breach affecting you we will notify you as required by law.

11. Changes

We may update this policy from time to time. Material changes will be announced on this page and, for account holders, by email. The date at the top shows the current version.