PixelLabs is the trading name of Jay Breen, in the UK. This page says what the apps and this site know about you, who else sees it, and what you can ask for. Questions go to support@pixel-labs.dev.
The apps
The apps run on your Mac and keep what they find there. None of them has an account, and none of them sends what it scans, finds or edits anywhere. There are no analytics and no crash reports.
Update checks. Each app asks, the first time it opens, whether it may check for updates. If you say yes, it checks once a day by downloading a small file from GitHub, where the apps are published. GitHub sees your IP address and the app's name, as it would for any download. Say no, and the app never checks; you can change your mind in its menu.
A few apps have to reach further to do their job:
- AppPatch checks your other apps for updates. To do that it asks Apple's App Store which of your apps it sells and what their latest versions are, downloads Homebrew's public list of apps, and downloads each app's own update feed from its maker. Apple sees which apps you have that came from the App Store; each maker sees that someone checked their app for an update, as the app itself would. Nothing else about you or your Mac goes with these requests.
- Watchtower downloads CISA's public list of known exploited vulnerabilities, and asks FIRST's EPSS service how likely the vulnerabilities it found are to be exploited. That request carries the vulnerability numbers (CVE IDs) and nothing else: no addresses, names or scan results. Its reports load the Inter font from Google Fonts when you open them, so Google sees your IP address then.
Buying a licence
Licences are sold through Stripe Managed Payments: Stripe is the seller of record, takes the payment, and works out and pays any VAT or sales tax. Stripe handles your card details; PixelLabs never sees them. Stripe's own privacy policy covers what it keeps.
From each purchase PixelLabs keeps your name, your email address, the licence key, what you bought, what you paid and when. That is used to email you the key, to send it again if you lose it, and for the tax records the law requires. It is never used for marketing and never sold or shared, except with the services below that do the work.
Coffees. The buy me a coffee button is a tip, not a licence, and goes through the Stripe account of bitsandbytes.uk, the personal site of the same person. Stripe keeps the payment record; nothing about it is kept here.
Who else handles it
- Stripe takes payments and handles tax, as above.
- Resend sends the email with your licence key.
- Railway hosts this site and the database the licence records live in.
- Cloudflare runs the domain and passes email sent to support@pixel-labs.dev on to the inbox where it is read.
- GitHub serves the app downloads and update checks.
Some of these are based in the United States. Each moves personal data out of the UK only under the safeguards UK law requires.
This site
The site sets no tracking cookies and runs no analytics or adverts. It remembers whether you chose the light or the dark theme, in your own browser. Pages that aren't public yet set a cookie once you enter their passcode. Like any website, the hosting keeps short-lived logs of requests, including IP addresses, to keep the site running and safe.
How long it's kept
Licence records are kept for as long as the licence can be used, and for at least six years after a purchase, because UK tax law asks for that. Support emails are kept for as long as they're useful for helping you, then deleted.
Your rights
You can ask to see what PixelLabs holds about you, to have it corrected, or to have it deleted (where the law doesn't require it to be kept). Email support@pixel-labs.dev. The law that applies is the UK GDPR, and the reason for keeping purchase records is the contract with you and the legal duty to keep tax records. If you're unhappy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.
If this notice changes, the date at the top changes with it.