Privacy Policy

Last updated: November 1, 2026

This policy explains what personal information Pixel Print NYC (“Pixel Print”, “we”, “us”) collects through pixelprint.nyc (our print shop website and customer accounts) and PixelCard (our digital business card and link-page service), how we use it, and the choices you have.

1. Information we collect

Account and orders. Name, email address, password (stored only as a salted hash), and optionally phone number and company. If you request a quote or place an order we also store the order details and notes you send us. Card payments are handled by Stripe; we do not store full card numbers.

PixelCard pages you create. Everything you put on your page: name, title, company, bio, photos and images, links, phone number and email you choose to show, and design settings. Pages you publish are public by design: anyone with the link can see them. If you add a phone number or email to a card, it is included in the “Save contact” file visitors can download.

Visitors to a PixelCard page. When someone opens a page, taps a link, or saves a contact, we record the event type, whether it came from an NFC tap, a QR scan or a direct link, approximate location (country and city, derived from the IP address by our hosting provider), device type (iOS, Android, desktop), and the referring page. We do not store the visitor’s IP address with these analytics events. We do not use advertising trackers on PixelCard pages, and visitors are not tracked across other sites.

Lead forms. If a page owner adds an email signup form, anything a visitor submits (name, email, optional message) is stored and shown to that page owner. We also keep the submitter’s IP address for a limited time to prevent abuse and rate-limit spam.

Messages to our Facebook Page and Instagram account. When you send a message to the Pixel Print Facebook Page (Messenger) or to our Instagram business account, Meta delivers that message to us through the Meta Messenger Platform and Instagram Messaging API. We receive your Facebook or Instagram user ID scoped to our Page (a page-scoped ID, not your personal account ID), the name shown on your profile, the text of your message, and any photos or files you attach. We store this in our internal customer management system (CRM), which only our staff can access, so we can answer your request, prepare a quote and follow up on your order. We do not use these messages for advertising, we do not sell them, and we do not share them with anyone other than the service providers listed below (Cloudflare hosting). We do not access your friends list, posts or any other data in your Facebook or Instagram account.

Reports. If you report a page, we store your report and IP address to review it and prevent repeated abuse.

Cookies. When you log in we set one strictly necessary session cookie (pp_session) so you stay signed in. PixelCard public pages do not set cookies. Embedded content you or a page owner choose to add (for example a YouTube or Vimeo video) may set its own cookies once played. Fonts and icons may load from third-party content delivery networks (Google Fonts, jsDelivr), which can see your IP address and browser details.

Our main website. pixelprint.nyc uses analytics and advertising tools (such as Google Analytics, Meta Pixel and TikTok Pixel) to measure traffic and advertising. These apply to our shop website and may use cookies; you can block them with your browser settings or a content blocker. Page owners’ visitors are not enrolled in advertising audiences through PixelCard.

2. How we use information

• To provide and secure your account, orders and PixelCard pages, and to show your page to visitors.
• To show page owners statistics about visits, taps and clicks on their own pages.
• To respond to quotes, support requests and reports, and to prevent spam, fraud and abuse.
• To send service messages such as order updates and security notices. We do not send marketing email unless you ask for it or have opted in.
• To improve and maintain the service and comply with the law.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

3. Who we share it with

• Service providers that run the service for us: Cloudflare (hosting, database, security), Stripe (payments), Resend (transactional email such as password resets and new-lead notices), Cloudflare Turnstile (spam protection on sign-up and lead forms), and similar providers, only as needed to operate the service.
• Your own tools: if a PixelCard owner adds a webhook URL, new signups on that page (name, email, message) are sent to that address, which the owner controls.
• Page owners: lead-form submissions go to the owner of the page you submitted them on, who is responsible for how they use that information.
• Legal and safety: when required by law or to protect rights, safety and the service.
• Business transfers: if Pixel Print is involved in a merger or sale, information may transfer with notice.

4. Page owners’ responsibilities

If you collect visitors’ details with a lead form, you are responsible for having a lawful reason to do so, for telling visitors how you will use their details, and for honoring unsubscribe and deletion requests. You may only email people who submitted a form for the purpose they expect, and you must follow applicable law, including CAN-SPAM. For lead data, Pixel Print acts as a service provider storing it on your behalf.

5. Retention and deletion

We keep account and card data while your account is active. Deleting a card in the PixelCard dashboard permanently removes the card, its analytics and its leads. You can delete your whole PixelCard data and account yourself in the dashboard (Share tab, “Delete account”); if you also have print orders, those order records are kept and you can ask us to erase them. To ask us to remove a lead-form submission, contact us (below). We may keep limited records where needed for legal, tax, security or dispute purposes, and we may periodically delete old analytics data.

Deleting your Facebook or Instagram message data

If you messaged us on Facebook or Instagram and want us to delete what we stored, send us a message on the same channel (or use the contact form below) with the words “delete my data”. We will delete the conversation record and your page-scoped ID from our CRM within 30 days and confirm when it is done. Order records needed for tax or accounting are kept only as long as the law requires. You can also remove our access at any time by deleting the conversation in Messenger or Instagram, or by blocking our Page or account.

6. Your rights

You can access and correct most of your information in your account. Depending on where you live (for example California, or other U.S. states with privacy laws), you may have the right to know what we hold about you, request deletion or correction, and not be discriminated against for exercising these rights. To make a request, contact us below; we may need to verify your identity. If you are a visitor who submitted details on someone else’s page, you can also ask that page’s owner directly.

7. Security

We use HTTPS, hash passwords, and restrict access to our systems. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. Choose a strong, unique password.

8. Children

Our services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

9. Where data is processed

We are based in the United States and our providers process data in the United States and other countries where they operate.

10. Changes

We may update this policy. We will post the new version here with a new date, and for significant changes we will take reasonable steps to notify account holders.

11. Contact