DRAFT — pending legal review. Not for publication.
Privacy policy
Last updated: {{DATE}}
This policy explains what personal data IsPixelWorking (ispixelworking.com) processes, why, and for how long. We have tried to keep it short and concrete.
Who we are
IsPixelWorking is operated by [operator details pending], {{OPERATOR_ADDRESS}} ("we", "us"). For privacy questions, contact {{PRIVACY_EMAIL}}.
The short version
- You do not need an account. There are no accounts.
- We do not use third-party trackers, advertising pixels or analytics cookies on ispixelworking.com.
- When you run a check, we store the URL you checked, the results, and a hashed (not plain) version of your IP address for rate limiting.
- Reports and everything attached to them are deleted automatically after 90 days.
- We only store your email address if you give it to us and tick the consent box.
What we process and why
1. When you run a check
What we store:
- the URL you entered, the normalized URL and the final URL after redirects;
- the results of the check: findings, grade, technical evidence (the tracking requests the page tried to send, names of cookies it set, its redirect chain, the cookie consent tool detected) and screenshots of the checked page;
- the time of the check and the country the checking browser ran from;
- a hash of your IP address, computed with a one-way function, to enforce limits on how many checks can be started from one address and to prevent abuse. We do not store your IP address in plain form. {{HASHING_DETAILS: e.g. salted SHA-256, salt rotation period}}
Cookie values from checked sites are not stored, except our own test markers and the format check of Meta's _fbc and _fbp cookies. Other values are removed or hashed.
Why: to provide the check you asked for and to protect the service from abuse. Legal basis: {{LEGAL_BASIS_CHECKS: e.g. Art. 6(1)(b) GDPR (providing the service you request) and Art. 6(1)(f) GDPR (legitimate interest in preventing abuse)}}.
Screenshots and evidence show the checked website as it appeared to our automated browser. If that page shows personal data publicly, it may appear in a screenshot.
2. Reports
Reports are private by default. Each report has a long, random, unguessable link. Reports are marked so that search engines do not index them, and we do not publish them in any gallery or list. Anyone you share the link with can open the report, so share it with care.
3. "Notify me" emails
If you ask us to notify you (for example "notify me if this breaks" or about upcoming features), we store your email address, the URL it relates to, the time, and the fact that you ticked the consent box.
Why: to contact you about what you asked for. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by {{UNSUBSCRIBE_METHOD}}. Retention: {{NOTIFY_RETENTION: until you withdraw consent, or at most N months after the related feature launches}}.
4. Usage statistics about our own website
We count how our website is used (for example: a check was requested or completed, a report was viewed, a fix option was clicked) with our own, first-party, cookieless analytics. These events are stored in our own database. For report views we record only the domain of the referring site, not the full address. We do not use Google Analytics, Meta Pixel or any other third-party tracker.
Why: to understand which parts of the service are useful and improve it. Legal basis: {{LEGAL_BASIS_ANALYTICS: e.g. Art. 6(1)(f) GDPR, legitimate interest}}. {{ANALYTICS_RETENTION}}
5. Bot protection on the check form
To prevent automated abuse of the check form, we use {{TURNSTILE: Cloudflare Turnstile}}, which processes technical information about your browser and connection to tell humans from bots. {{TURNSTILE_DETAILS: link to Cloudflare's privacy policy, legal basis}}
6. Accounts and monitoring (paid plans) {{PHASE2: applies once monitoring launches}}
If you sign in to monitor pages, we process:
- your email address, to send you sign-in links, alerts and a weekly summary (contract: providing the service you signed up for). Sign-in links work once and expire after 15 minutes; we store only a hash of each link and of your session cookie;
- the alert addresses you add (for example a client's or a colleague's email). Tell them you added them; every alert contains a link to stop alerts to that address;
- the pages you monitor and the results of their scheduled checks, the problems we found and when we emailed you about them;
- your subscription status (plan, renewal date) received from our payment provider. We never see or store your card details.
7. Server logs
Our hosting provider may process technical data such as IP addresses in short-lived logs to operate and secure the service. {{LOG_RETENTION}}
Cookies
ispixelworking.com does not set advertising or analytics cookies. If you sign in, we set one strictly necessary cookie, ipw_session, that keeps you signed in for up to 30 days. {{STRICTLY_NECESSARY_COOKIES: also list any cookies set by the bot protection, or state "none"}}
Retention
| Data | Kept for |
|---|---|
| Checks, reports, findings, evidence, screenshots, hashed IP | 90 days, then deleted automatically |
| "Notify me" email signups | {{NOTIFY_RETENTION}} |
| First-party usage statistics | {{ANALYTICS_RETENTION}} |
| Opt-out list for website owners (domain names) | as long as the opt-out applies |
| Account, workspace and alert addresses | while the account exists; deleted on request {{PHASE2}} |
| Scheduled monitoring checks and their findings | 12 months while a subscription is active, then 90 days {{PHASE2}} |
| Record of emails sent (recipient, subject, time; no message content) | {{OUTBOX_RETENTION}} {{PHASE2}} |
| Subscription and billing events from the payment provider | {{BILLING_RETENTION: as required for accounting}} {{PHASE2}} |
Who processes data for us
We host the service on Cloudflare (compute, database, file storage and bot protection). {{PROCESSORS: list processors, their location and transfer safeguards, e.g. Cloudflare, Inc., EU Standard Contractual Clauses / Data Privacy Framework}}. Emails are sent through Mailgun (Sinch Mailgun, EU region) {{EMAIL_PROVIDER_DETAILS: entity, DPA, transfer safeguards}}. Payments for paid plans are handled by Lemon Squeezy, which acts as the merchant of record and processes your payment and billing details under its own privacy policy {{LEMON_SQUEEZY_DETAILS}}. {{PHASE2}}
We do not sell personal data and do not share it with advertisers.
Website owners
If your website was checked by someone using IsPixelWorking, see our bot page for what the checker did and how to opt out.
Your rights
Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You can also complain to a data protection supervisory authority, {{SUPERVISORY_AUTHORITY: e.g. the authority in the operator's country}}.
Because we store only a hash of IP addresses, we may not be able to link a free report to you unless you send us its link. If you have an account, you can ask us to export or delete your account data.
To exercise your rights, contact {{PRIVACY_EMAIL}}.
Changes
We will update this page if our data handling changes and change the date at the top.