Privacy Policy

This Privacy Policy explains how WELLDONECODE LLC (“WellDoneCode”, “we”, “us”, “our”), the developer of PerfectPixel, collects, uses, and shares information in connection with the PerfectPixel browser extension and the PerfectPixel website (together, the “Service”). It applies to all editions of the extension except where a section states otherwise. For the purposes of the EU/UK General Data Protection Regulation (GDPR), WELLDONECODE LLC is the data controller. To exercise your rights or ask a question, contact us at support@welldonecode.com.

1. Information We Collect

Account Information

When you create an account or purchase PerfectPixel PRO, we collect your email address and store a cryptographic hash of your password. We also store subscription status, plan type, and billing dates associated with your account. We never store your password in plain text.

Payment Information

Payments are processed by Paddle.com, which acts as our merchant of record. Paddle collects your payment details (such as credit card number, billing address, and tax information) directly. We do not receive or store your payment card details. For more information, see Paddle's Privacy Policy.

Usage Statistics

When enabled, the “Send anonymous statistics to developers” setting uses Google Analytics to understand how the extension's own panel UI is used. Where applicable law requires opt-in consent (such as the EU, EEA, and UK), it stays off until you consent; elsewhere it is on by default. You can turn it off at any time in Settings → Statistics. Enterprise installations never send these statistics. The data collected through this setting includes:

• button clicks and screen views within the panel UI;
• performance timings (for example, how long the panel or settings page takes to open);
• the number of layers and folders you have, and which features you use;
• interactions with in-panel notifications;
• the extension version, your plan type (free or PRO), and your browser's device pixel ratio;
• approximate (country/region-level) geographic location.

These statistics are associated with a random per-installation identifier (a UUID generated on your device on first install), not with your name, email, or account. We do not collect the addresses or contents of the web pages you visit, or the contents of the images you overlay.

For location, your public IP address is retrieved (via ipify.org) and truncated on your device before any data is sent to Google Analytics, so that only your country/region can be derived. We never store your full IP address from this analytics flow, and Google Analytics receives only the truncated value. (See “Authentication Activity” below for the separate, narrower context in which we do retain full IP addresses.)

Advertising Data

Advertisements are served by our partner BuySellAds within a sandboxed iframe in the PerfectPixel panel. The iframe cannot access your cookies, local storage, or the pages you visit, and ads are not personalized using data collected by the extension or stored on your device. Purchasing PerfectPixel PRO disables all advertising.

Authentication Activity

Each time you successfully sign in to your PerfectPixel account and each time you sign out, we record the event together with the IP address, the browser's User-Agent string, the per-installation UUID described above, and the timestamp. We process this data under the legitimate-interest lawful basis (GDPR Art. 6(1)(f)) to detect and prevent unauthorized account sharing, and to investigate security incidents. These records are retained for 180 days and then automatically deleted.

Cookies and Local Storage

The extension stores your authentication tokens, settings, and layer data locally in your browser. The PerfectPixel website uses cookies to keep you signed in, and Google Analytics sets additional cookies to support usage analytics.

Enterprise Edition

The Enterprise edition transmits no external data except when users manually paste image URLs into the extension.

2. How We Use Your Information

The collected data supports the following purposes:

• Improving the extension through usage analysis
• Displaying advertisements within the panel UI of the free edition
• Managing PRO subscriptions and Enterprise offerings
• Detecting and preventing unauthorized account sharing, and investigating security incidents

Where the GDPR applies, we rely on these legal bases: performance of a contract (account creation, PRO subscriptions, and payments); our legitimate interests (improving the extension, securing accounts, and serving advertising in the free edition); and, where required by applicable law, your consent — which you can withdraw at any time.

3. Sharing Your Information

We share data with the following third-party service providers solely to operate the Service:

• Paddle.com — payment processing and subscription management (merchant of record)
• Google Analytics — usage analytics; receives only a truncated IP (country/region-level)
• ipify.org — provides your public IP address, which is truncated on your device before use (see Usage Statistics)
• BuySellAds — serves the advertisements shown in the free edition; the ad request exposes standard network metadata such as your IP address and User-Agent

Beyond these providers, we do not disclose personal data to third parties except as required by law, in response to a subpoena or other legal process, or to protect our rights or the rights of others.

International Data Transfers

Our service providers, including Google and Paddle, may process your data in countries outside your own, including the United States. Where data is transferred out of the EEA or the UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

4. Protecting Your Information

We implement reasonable security measures to protect data that is transmitted and stored. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@welldonecode.com. Where applicable under the GDPR, CCPA, or similar legislation, you also have the right to data portability and to object to or restrict certain processing. We will respond to verified requests within 30 days.

You can withdraw your consent to usage analytics at any time by turning off “Send anonymous statistics to developers” in the extension's Settings. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. We do not sell your personal information, and we do not use it for cross-context behavioral advertising as defined under the CCPA/CPRA.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your account data is kept for up to 12 months in case you choose to reactivate, after which it is deleted. Authentication activity records (successful sign-in and sign-out events with IP and User-Agent) are retained for 180 days and then automatically deleted. Usage analytics held in Google Analytics are pseudonymous (tied to a random per-installation identifier rather than your identity) and are retained in Google Analytics for 14 months (the configured event-level retention period), after which event-level data is automatically deleted; aggregated reports that do not identify you may be kept longer. You can turn analytics off in Settings to stop collection. We can delete account and authentication data on request; the pseudonymous analytics aren't linked to you, so we generally can't isolate an individual's records to delete them.

7. Children's Privacy

The extension is not directed at children under the age of 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has given us identifiable data, contact us and we will delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and revise the version number and effective date above.

9. Governing Law

This Privacy Policy and any dispute arising from it are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules. Nothing in this policy overrides mandatory consumer or data-protection rights you may have under the laws of your country of residence.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at support@welldonecode.com, or by mail at:

WELLDONECODE LLC
254 Chapman Rd, Ste 208 #4980
Newark, DE 19702
United States