1. Scope and service
This notice applies to FooPixel's website, API, storage, and related operations, including browser tools and Free and PRO accounts. FooPixel is a FooPlugins service. Hosting is optional and public-file access follows the current retention and delivery policies.
Questions can be sent to hello@foopixel.com.
2. Information we receive
When you select media in a browser tool, its source stays on your device while you edit or download. The browser may download processing software. Choosing Host on FooPixel sends the generated output, filename, file type, checksum and related upload information to the service. The direct upload form sends the prepared image or, when local preparation is unavailable, a supported original for server processing.
Requests to the website and hosting service generate network, request, security and diagnostic information needed to operate the service, prevent abuse and enforce allowances. Hosting diagnostics can include upload status, timing, file properties and response outcomes. Operational logs may be sampled.
Our first-party tool analytics records the tool page, milestones such as export, download, hosting and claim completion, a broad referral category, and a random ID created for that page visit. Analytics payloads contain no filenames, media, account details, claim tokens or full URLs. We omit cookies and referrers from these requests and honor Do Not Track and Global Privacy Control. Optional claim attribution is carried in the link fragment and expires after 30 minutes in the claiming tab's session storage. We use these best-effort measurements to improve the tools; analytics failures never prevent you from using them.
Uploading as a visitor does not create an account. If you sign in, we use the identity and verified email information returned by our authentication provider to associate your account, media, connected agents and usage. Session cookies and security tokens keep you signed in and protect account actions. Your browser may temporarily store upload recovery or claim information so you can finish an interrupted workflow.
Media made available through a public URL may be viewed by anyone who obtains that URL while the file remains available. Local tool previews and downloads are not automatically published.
If a signed-in owner requests optional Category suggestions for selected account media, we send the available filename, title, description, caption, alt text and tags selected for that request and the active Category names, definitions, exclusions and aliases to OpenRouter and the model providers that process the request for text-based evaluation. We do not send media pixels or original files for this Category request. The owner can inspect the selected text and Categories, then review the full batch count and maximum reservation before confirming; suggestions require the owner's separate review before they are added to Library Categories.
If a signed-in owner runs AI assist on account media, we send a reduced copy of the image, or up to 12 frames sampled from a video (and its audio when the owner includes speech), to OpenAI to suggest a title, description, caption, alt text and tags. AI assist also sends the names, definitions and exclusions of up to 100 of the account's active Categories so the same request can suggest Categories. Suggestions are not applied until the owner chooses them.
3. How information is used
- to process and deliver uploads and manage media accounts;
- to apply account allowances, handle ownership claims, and maintain billing status;
- to moderate content and enforce our policies;
- to enforce limits, investigate abuse, secure the service, and maintain reliability;
- to operate and improve the service; and
- to respond to reports, copyright complaints, legal requests, and support messages.
We do not use an anonymous upload to create an account. We do not describe FooPixel as a regulated archive, a guaranteed deletion service, or a compliance certification.
4. Service providers and disclosures
Cloudflare provides hosting, storage and media processing. WorkOS supports account authentication, and Freemius handles paid checkout and billing. We also use configured moderation providers to review uploaded media. These providers process the information needed for their part of the service; payment details are handled through the payment provider, not entered in a FooPixel media tool.
When an owner requests optional Category suggestions, OpenRouter and the model providers that process the request receive the selected text and active Category details described above to return suggested Categories and supporting scores. This optional request is subject to availability and the account's chosen daily budget. A request already submitted may still count against your selected daily budget if cancelled or its final usage remains unknown.
When an owner runs AI assist, OpenAI receives the media samples and Category details described above to return suggested details, tags and Categories.
We may disclose limited information when needed to investigate abuse, respond to a valid legal process, protect people or the service, or enforce the Terms. A report may include the relevant public URL, reason, supporting detail, and operational timestamps.
Hosted images can be resized or stripped of metadata. Hosted MP4 can be re-encoded, which can change its appearance, size or metadata. Motion moderation uses sampled visual frames and does not inspect every frame or review the video's sound. Keep your original file and local export separately.
5. Retention and deletion
Files and account records
Unclaimed visitor uploads expire after 24 hours. Files have no expiry for active Free and PRO accounts, subject to account limits and the Terms. Account verification is required.
Full storage blocks additional files; we do not delete files to make room. Claiming uploads or confirming they should be added at sign-in or agent approval follows your plan’s limits. Expired or deleted files cannot be restored this way. See pricing and your dashboard for limits and status.
When PRO ends, an eligible verified account can keep eligible files without expiry if they fit within 1 GiB. Otherwise, you have 30 days to delete enough files to fit. If they still do not fit, public access ends at day 30. Owner recovery ends at day 90, then files are deleted unless you renew in time under the renewal rules. Moving to Free does not make recovery-only files public again.
Account restrictions, content checks, legal duties and deletion requests can affect access and retention. Access may end before stored copies are removed. We may keep limited service, usage, billing and security records to prevent abuse, manage accounts and incidents, or meet legal duties.
Inactive accounts
We may remove files from, or close, a Free account after three months without sign-in. We will give at least 30 days’ notice by email first. Uploads, API activity and public file views do not reset this period.
Copies used for delivery
CDN delivery is included for eligible public files from verified Free and active PRO accounts, even if they have an expiry date. Links and expiry dates stay the same. CDN delivery counts toward your monthly limit, whether a copy is reused or fetched again. A saved copy or a particular speed is not guaranteed.
A private file’s own link stays private. Its original may use CDN through an open public gallery. Each new request checks access, ownership and gallery membership. Passcode galleries do not use public CDN delivery.
PRO can clear CDN copies and request saved resized images, within service limits. Cache clearing has a waiting period between requests. Saved resized images are not backups; they follow the original’s access and removal rules.
Browsers may reuse account-owned public files for up to 10 minutes, shortened by expiry or access deadlines. Passcode-gallery copies may be reused only in the browser that accessed them. New requests check current access. Unclaimed visitor uploads are not saved for browser reuse. Browser reuse does not use your delivery allowance.
We cannot take back copies people have already viewed or downloaded. They may keep them after access ends. Removing stored delivery copies can take time.
6. Questions and choices
For privacy questions or a request concerning information associated with you, contact hello@foopixel.com with enough detail for us to investigate. Do not send suspected illegal imagery as an attachment. Security vulnerabilities should go to security@foopixel.com; suspected abuse belongs at abuse@foopixel.com.
You can download locally without hosting, sign out of an account, and manage or request deletion of hosted media through the available account controls. We may update this notice as the tools, hosting and account features change. The effective date above identifies the current version.