Privacy policy

The short version

Four sentences, and the rest of this page is the detail behind them.

What this policy covers

Three different things carry the StegoPixel name, and each one touches your data differently — so this policy covers all three. Where a detail is technical rather than legal, it links to the page that explains it in full.

• The Windows application — StegoPixel 1.0.0.0, available on the Microsoft Store. Everything it does with your data is covered in the application section.
• This website (stegopixel.app) — a static site with no cookies; the host's cookieless page-view measurement is the one thing it does record, and the website section sets that out in full.
• The Microsoft Store listing — the storefront, the download, the purchase and the reviews belong to Microsoft, not to us; see the Store section.
• What it does not cover: pages you deliberately open from the app or from this site, such as the map links in a geo-tag report. Those are other people's sites, and their own policies apply.

The Windows application

This is the part that matters most, because the app is the thing you hand your files to. It has no account system, no licence check and no network code, so there is no point at which your images could leave the machine — even accidentally.

• No account, no sign-in and no licence server: the app behaves identically on a machine that has never been online.
• The package requests full-trust desktop execution and no internet capability at all — the manifest declares nothing else.
• The only outbound addresses the product can produce are openstreetmap.org and maps.google.com references written into a geo-tag report, and both are contacted only if you click them.
• Logs are diagnostic, local and rotated daily: kept for a week, then discarded, and never transmitted anywhere.

The privacy page carries the same table with more engineering detail, including where each file is written and what deleting it does.

Deleting your data

Because everything sits in one ordinary folder, deleting that folder resets the app completely — no server-side copy exists to survive it. Uninstalling removes the application but deliberately leaves your data folder alone, so delete it separately if you want the settings, the logs and any keys gone. The reversibility section explains how the defaults protect you before anything is written at all.

This website

The marketing site is built to the same standard as the app: it asks nothing of you and remembers almost nothing about you. There is no cookie banner here because there are no cookies to consent to.

• No cookies, no advertising or tracking scripts, and no third-party embeds.
• One stored preference: a theme choice kept in your browser's local storage under the key stegopixel-theme. Clear site data and it is gone; nothing breaks.
• Every asset is served from this domain, the fonts included — so the only external file the browser fetches is the host's analytics script, dealt with in the next paragraph.
• No forms: there is no field on this site into which you could type personal data, and no newsletter to subscribe to.
• The site's security policy denies it access to your location, camera, microphone, payment and browser-topics signals.

Hosting

The site is served through Cloudflare's network, as most of the web is. Like any host, it processes requests in order to deliver pages and absorb abuse, which necessarily involves technical request data such as an IP address; that processing is governed by Cloudflare's own privacy terms. We do not use it to identify or profile visitors.

Analytics, stated plainly

The one exception to the list above is page-view measurement, and it arrives with the hosting rather than from us. Cloudflare injects its own analytics script into every page it serves — the file is fetched from static.cloudflareinsights.com, which is why that one host appears in this site's content-security policy. The script sets no cookies and keeps nothing in your browser, and Cloudflare states that it does not fingerprint visitors by IP address or user agent, and does not collect personal data for its analytics. What it records is aggregate — page views, referring pages and load timings — posted back to /cdn-cgi/ on this domain rather than to an advertising network. Those measurements still travel through Cloudflare's infrastructure, exactly as every request to this site does, which is the paragraph above. If you would rather not be counted, an ordinary script or ad blocker prevents the script from running. That host is the only one this site opens a connection to.

Buying and using it through the Microsoft Store

StegoPixel is distributed through the Microsoft Store, which means Microsoft handles the parts that involve you as a customer — including the purchase and the 15-day free trial. Those parts are governed by Microsoft's own privacy terms, not by this page.

• Microsoft handles the download, purchases, trials, updates, receipts and reviews, under its own privacy terms.
• Your Microsoft account relationship is with Microsoft. The publisher never sees your payment details.
• What the publisher sees is aggregate: how many people have the listing and how it is rated, with nothing tied to an identified individual.
• Uninstalling removes the application, not your data folder — see the application section.

Your rights

Data-protection law gives you rights over personal data a company holds about you. In the application's case there is nothing to hold, so these are best read as a statement of fact rather than a process you have to go through.

• Access and portability — the app has never collected anything about you, so there is nothing to request or export. If you have sent a message to the support channel, you can ask what was kept.
• Erasure — delete %LocalAppData%\StegoPixel and the app's local data is gone; ask us to delete any support message you sent.
• Objection and restriction — there is no profiling, no automated decision-making and no targeted advertising to object to.
• No sale, no sharing — we do not sell or share personal information as those terms are used in the California Consumer Privacy Act as amended. There is no “do not sell” link because there is nothing being sold.
• Complaints — you may complain to your local data-protection authority at any time; we would rather hear from you first, because a factual error on this page is fixable.

Children's privacy

StegoPixel is a professional image tool, not a service for children, and it collects no personal data from anyone, of any age.

• No account, no profile and no age or identity data is requested by the app or by this site.
• The Microsoft Store applies its own age rating and family settings to the listing, under Microsoft's terms.

Where data is processed

There is no data set to transfer, so this section is short by design rather than by omission.

• The application: nowhere. Nothing is sent from your machine, so nothing crosses a border.
• This website: requests are served by Cloudflare's global network and may be handled in a data centre outside your country. That is infrastructure routing, not the transfer of a profile about you.
• Support messages: if you choose to send one, it is processed to answer you and for no other purpose — see the contact section on the About page.

Changes to this policy

This policy describes StegoPixel 1.0.0.0 as published on the Microsoft Store, and it will be revised as the product changes. The date at the top of the page is the date of the current text.

• If the app's behaviour ever changes, this page changes first and the date changes with it — no silent edits.
• There is no mailing list to notify you through, because running one would mean collecting addresses; the page itself is the notice.

Privacy questions, in brief

Contact

Questions about anything on this page — or about the app's handling of your files — are welcome at info@stegopixel.app.