Effective date: 7 October 2026
This policy explains how PixelPano collects and uses personal data on the website pixelpano.com, in the web app app.pixelpano.com, in the player player.pixelpano.com and in the PixelPano Player Android app. We only collect what we need to run the service, and we never sell your data.
1. Who we are
The controller of your personal data is:
Secret Code j.d.o.o.
Spinutska 31, 21000 Split, Croatia
OIB (tax ID): 22057108463
Email: [email protected]
2. What we collect and why
Your account
When you create an account, we store your email address and password (only as a secure hash — never in readable form), your organisation's name and your role in it. If you invite a teammate, we store their email address until they accept the invitation. We use this to sign you in, manage your account and send service emails (address confirmation, password resets, invitations).
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Content you upload
We store the images, videos and RSS feed settings you add so we can show them on your screens. Files are private and accessed through time-limited links. You are responsible for the content you upload — please don't upload other people's personal data without a proper basis.
Legal basis: performance of a contract.
Screens and devices
For each connected screen, we store a randomly generated device ID, a pairing code, the screen's name, its working hours and its activity history: when it was on or off and which content it was showing. We use this to show you each screen's status and playback history.
Legal basis: performance of a contract.
Contact form
When you write to us through the contact form, you send us your name, email address, company (optional) and message. The message is delivered to us by email so we can reply; it is not stored in our database.
Legal basis: our legitimate interest in answering your enquiry, or taking steps at your request before entering into a contract (Art. 6(1)(b) and (f) GDPR).
Technical data
Like any web service, our servers and providers see your IP address with each request. We use it only temporarily, to deliver pages and to prevent abuse (for example, rate-limiting the contact form) — we don't store it with your account.
Legal basis: our legitimate interest in running the service securely and reliably (Art. 6(1)(f) GDPR).
3. Cookies and local storage
The pixelpano.com website uses no cookies and no local storage. We don't use any analytics, advertising or tracking tools.
The web app keeps your sign-in tokens in your browser's local storage and, if you opened an invitation link, its ID. The player keeps its device ID, pairing code and a temporary copy of your content so the screen keeps playing offline. All of this is strictly necessary for the service to work, so it doesn't require consent.
4. Who else processes your data
We use a few trusted service providers (processors) who handle data only on our instructions:
- Amazon Web Services — servers, database and file storage, in the Frankfurt region (EU).
- Brevo (France) — email delivery (confirmations, invitations, contact form messages).
- Cloudflare — DNS, HTTPS and website protection. Cloudflare may process technical data outside the EU, safeguarded by Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
- Google Fonts — the web app and player currently load the Inter font from Google's servers, which means Google sees your IP address. The pixelpano.com website serves the font itself.
We don't sell your data or share it for advertising. We only disclose data when the law requires us to.
5. How long we keep data
- Your account, screens and screen activity history — for as long as the account exists.
- Uploaded content — until you delete it or delete your account. Deleting a file also deletes its thumbnails.
- Invitations — until they're accepted or you revoke them.
- Contact form messages — for as long as needed to handle your enquiry.
To delete your account, email [email protected] from the address linked to it. We'll delete the account and all associated data within 30 days. Deleted data may remain in encrypted database backups for up to 7 more days. See Delete your account for step-by-step instructions, including how to delete a whole organisation.
6. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access your personal data and get a copy of it,
- correct inaccurate data,
- have your data deleted,
- restrict how we process it,
- receive your data in a machine-readable format (portability),
- object to processing based on our legitimate interest.
To exercise any of these rights, email [email protected]. We'll reply within one month. If you believe we process your data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr, or with the data protection authority in your own EU country.
7. PixelPano Player for Android
The Android app shows the PixelPano player (player.pixelpano.com) full-screen. It contains no analytics, advertising or crash-reporting tools, and doesn't itself collect contacts, location or device identifiers. It only requests internet access to load content, keeps the screen on while the player is open, and caches the player locally so it can work offline. Data handled by the player is covered by the sections above.
8. Security
All traffic is encrypted with HTTPS, passwords are stored only as secure hashes, and uploaded files are not publicly accessible. Data is stored within the EU.
9. Children
PixelPano is a business service and is not intended for anyone under 16. We don't knowingly collect children's data.
10. Changes to this policy
We may update this policy from time to time. The date at the top always shows when it last changed, and we'll email account owners about significant changes.
11. Contact
For any privacy question, email [email protected] or write to Secret Code j.d.o.o., Spinutska 31, 21000 Split, Croatia.