GDPR & your data rights

The data controller is Wouter Vellekoop (wouter.studio), Netherlands. For any data-protection request, email hello@pixelretriever.com. We aim to respond within 30 days.

We store metadata, a 64-bit perceptual hash and previews up to 1024 pixels. Cloud previews are reused for 24 hours and periodically cleaned up. Direct-upload previews remain until you delete the photo or account. Uploaded originals are removed after a successful scan; pending or failed uploads become eligible for scheduled cleanup after 30 days. Scans send a temporary image copy to SerpApi/Google Lens. Connected-source tokens are stored encrypted and use read-only access. Less data held means less risk to you.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate data.
• Erasure: delete your account and everything tied to it.
• Portability: receive your match data in a portable format (you can also export matches as CSV).
• Restriction & objection: limit or object to certain processing.
• Withdraw consent: e.g. unsubscribe from the newsletter at any time.

The fastest route to erasure is Settings → Danger zone → Delete my account, which wipes your account, photos, hashes and matches. For any other request, email us and we’ll take care of it.

We use a small set of subprocessors (listed in our privacy policy). Where data is processed outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

If you believe we’ve mishandled your data, please contact us first, we’d like the chance to fix it. You also have the right to lodge a complaint with your local supervisory authority. In the Netherlands that’s the Autoriteit Persoonsgegevens.