Back to Pixelskits
Legal Document · GDPR Compliant

Privacy Policy

Last updated March 2026
Your files never leave your device
100% local processing
GDPR Art. 13–14

Data Controller

Ribon Patil
Data Controller — GDPR Art. 13–14 Compliant

Pixelskits is operated by Ribon Patil (an individual operating from India). As the data controller under GDPR, we are required to identify ourselves before any personal data is processed.

For all privacy, data protection, and GDPR enquiries contact: [email protected] — we respond within 72 hours.

This site is operated by Ribon Patil, an individual based in India. Indian operators are not required to register with the UK ICO. However, where EU or UK users visit this site, we comply with GDPR obligations as documented in this policy.

The short answer

What We Collect

Your files are never collected — ever.

We do not store, transmit, or have access to any files you process. No session recording, no user profiling by us. We do use Google AdSense which sets cookies for advertising — see the AdSense section below.

Files: Zero tracking
Your files never uploaded
Local only
Files stay on your device
Summary — what data is processed and by whom
Data typeCollected?Notes
Your image / PDF / Word filesNeverProcessed locally in your browser — never uploaded
Google AdSense cookies & trackingAfter consentUsed to serve ads. May include personalised ads if accepted. See Google's Privacy Policy
IP via Google FontsOpt-in onlyOnly if you accept the consent banner
IP via CDNsStandard logsCloudflare / jsDelivr CDN request logs
Theme preference (localStorage)After consentWritten only after banner interaction
AdSense cookiesAfter consentSet by Google — see Google's cookie policy
Advertising

Google AdSense

This site uses Google AdSense to display advertisements. AdSense is operated by Google LLC. When you visit this site, Google may set cookies on your device and use your IP address, browser information, and browsing behaviour to serve ads.

If you accept cookies: Google may show you personalised ads based on your interests and browsing history across sites. Google uses the DoubleClick cookie and similar technologies.

If you decline / choose non-personalised: Google will still show ads, but they will be based on the content of the page only, not your personal profile. Some cookies may still be set by Google for fraud prevention purposes.

Google's use of advertising cookies is governed by Google's Advertising Policy. You can opt out of personalised advertising at adssettings.google.com.

Legal basis: Consent (GDPR Art. 6(1)(a)) for all advertising cookies, including non-personalised ads. Under PECR and the EU ePrivacy Directive, cookies require consent regardless of personalisation. If you decline advertising cookies, Google AdSense is not loaded and no advertising cookies are set. Some technically necessary, non-tracking cookies (e.g. for fraud prevention) may still be set by Google if AdSense loads — these fall under legitimate interest (Art. 6(1)(f)) as they are essential to secure ad delivery.

Architecture by design

Local Processing

In-browser · Zero server uploads

Every tool runs entirely in your browser. Compression, conversion, cropping, PDF manipulation, QR codes, background removal — all on your device. Your files never go anywhere.

The Remove Background tool (in-browser mode) downloads a pre-trained neural network model (~40 MB) once, then runs via WebAssembly locally. No image data is ever sent during this process. This is not a marketing claim — it is a technical fact.

Consent-gated only

Google Fonts

Consent required
Loaded only after you click Accept — never before
No font request fires without your explicit consent

Following Landgericht München I (Jan 2022), Google Fonts are loaded dynamically only after you click Accept. Declining serves system fonts — no request is ever made to Google.

If you accept: your browser fetches Bebas Neue, Playfair Display and Bricolage Grotesque from fonts.googleapis.com. Google may log your IP address and user agent. See policies.google.com/privacy.

If you decline: no request is made to Google. System fonts are used. Fully functional. Your choice is persisted in localStorage.

Technically necessary

CDN Libraries

Cloudflare CDN
jsPDF · PDF.js · Mammoth · JSZip · QRCode
jsDelivr CDN
@imgly/background-removal ML model

We load open-source JavaScript libraries from cdnjs.cloudflare.com and cdn.jsdelivr.net. These CDNs may log standard HTTP request metadata — your IP address and user agent — as part of normal operations. We cannot control or access these logs.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — these libraries are technically necessary for the tools to function. Balancing test summary: our interest is to deliver core tool functionality; the processing is limited to standard HTTP metadata only; no profiling or tracking occurs; users can clear browser cache to limit repeat requests. We consider our interest does not override the fundamental rights and freedoms of users given the minimal and unavoidable nature of the processing.

Retention: IP logs are retained by Cloudflare and jsDelivr in accordance with their own privacy policies. We do not receive or retain these logs.

Opt-in external API

Remove Background

Two modes — in-browser default

In-Browser (default): ONNX ML model runs locally via WebAssembly. Your image is never uploaded. This is the recommended mode.

remove.bg API (opt-in): If you provide your own API key, your image is sent to remove.bg's servers. Governed by remove.bg's Terms. We never see or store your API key.

Post-consent only

localStorage

On-device only
Two keys written only after consent banner interaction

pk-consent-v3 — set to a JSON object {ads, fonts, ts} the moment you click either button. Never written before that.

pk-theme — saves light/dark mode preference. Written only after pk-consent has been set.

We do not set any cookies ourselves. However, Google AdSense (used for advertising) does set cookies on your device — see the Google AdSense section above for details. localStorage data (theme and consent preferences) stays on your device and is never transmitted anywhere. Clear it anytime via your browser's site data settings.

Under the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive, storing information on a user's device requires either consent or necessity. Writing pk-consent-v3 is gated behind your explicit interaction with the consent banner (consent basis, GDPR Art. 6(1)(a)). Writing pk-theme is strictly functional and occurs only after consent has been recorded.

GDPR Art. 8 / COPPA

Children's Privacy

Pixelskits does not knowingly collect personal data from children. Our tools are general-purpose utilities not directed at children.

The minimum age for digital consent under applicable law varies by jurisdiction: under 16 in most EU member states (GDPR Art. 8), under 13 in the United States (COPPA), and varies elsewhere. We do not knowingly process personal data of any user below the applicable minimum age in their jurisdiction.

Because we collect no personal data by default — all file processing is local and cookies/AdSense are consent-gated — there is minimal risk of inadvertent collection. If you believe a child has provided personal data, contact us at [email protected] and we will take appropriate action promptly.

GDPR Art. 15–22

Your Rights

Access · Rectify · Erase · Port
Object · Withdraw consent · Complain

Right of access (Art. 15): Request confirmation of whether we hold personal data about you. We do not.

Right to erasure (Art. 17): Delete your localStorage data yourself at any time via your browser's site data settings.

Right to withdraw consent (Art. 7(3)): Clear site data for pixelskits.site — the consent banner will reappear on next visit allowing you to choose again.

Right to lodge a complaint: Contact your national supervisory authority — MeitY / your national data authority, CNIL (France), BfDI (Germany), or equivalent in your country.

Get in touch

Contact

Ribon Patil — Data Controller

Privacy questions, GDPR requests, consent withdrawal, or any data-related enquiry:

Based in: India. Contact: [email protected]

[email protected]