Privacy policy

1. Data controller

PixMomento operates the platform at pixmomento.com.

For privacy inquiries contact: [email protected]

2. Information we collect

We may collect the following categories of data:

• Account data: name, email, password hash, language preference, optional profile fields (e.g. belt)
• Order data: purchased items, tournament, amounts, payment status, guest email for checkout without registration
• Usage data: pages viewed, search queries (tournament/name), favorites stored in your account or browser
• Face search: a selfie you upload is processed in memory to find matching photos. We do not store the selfie file on disk or in cloud storage
• Face search metadata: session identifiers, match results, and timestamps may be stored to provide the service and prevent abuse
• Search in other tournaments: for up to 30 minutes we keep a technical fingerprint (hash) of the selfie file, from which the image cannot be restored, together with the list of tournaments where matches were found, so a repeated search with the same selfie does not run again
• Photographer/event leads: data submitted through contact forms (name, email, phone, message)
• Technical data: IP address, browser type, device information, cookies and local storage tokens for authentication and cart

3. How we use information

• Provide photo search, gallery, cart, and checkout
• Process payments through Stripe and deliver download links by email
• Run face matching using AWS Rekognition on tournament photo indexes
• Maintain your account, favorites, and order history
• Respond to support requests and manual merchandise orders
• Secure the platform, prevent fraud, and comply with legal obligations

4. Photo visibility & consent

Tournament photos are stored on our servers but are not shown on the public site until you give explicit consent through face search.

Before a face search you state who you are searching for: yourself, if you are 18 or older, or a minor, if you are their parent or legal guardian. Starting the search records that consent, and only then are matching previews (with watermarks) shown to you.

After you purchase and download an original, watermarked previews of those photos may remain visible in the tournament catalog for other buyers. Original files are never available without payment.

You may hide your photos from the public catalog or revoke consent entirely in account Settings. Revocation does not delete files from our servers but removes your access and public visibility.

5. Face search & biometric data

When you use face search, you upload a photo containing your face. The image is transmitted securely to our servers, analyzed in memory, and compared against indexed faces from the selected tournament and from other published PixMomento tournaments, so we can show you where else your photos are.

For other tournaments you only see the tournament name and the number of matches. The photos themselves open on that tournament’s page, where your consent for that tournament is recorded.

We do not persistently store your selfie. AWS Rekognition compares faces without retaining the uploaded selfie for future use.

Indexed face data derived from tournament photos is used solely to enable photo search on PixMomento. When photos are removed, associated face index entries are deleted.

Face search is available to users aged 18 and over. For a minor, including any child under 13, the search must be performed by a parent or legal guardian, who gives consent on the child’s behalf. Children under 13 may not use face search themselves.

We record which option you chose, together with the date and the version of the consent text, so that the basis for each search can be verified later.

6. Sharing & processors

We share data only as needed to operate the service:

• Stripe — payment processing (card data is handled directly by Stripe)
• Amazon Web Services (S3, Rekognition) — photo storage and face matching
• Resend or similar — transactional email (order confirmations, verification)
• Cloudflare — CDN, security, and DDoS protection
• Hosting provider — application and database hosting

7. Retention

• Account and order records — while your account exists and as required for tax/accounting laws
• Guest order records — linked to email for download and support
• Selfie uploads — not retained on our servers after the search request completes
• The selfie in your browser — kept on your device for up to 7 days so that switching to another tournament does not require uploading it again; clearing the site data removes it
• Server logs — limited retention for security and debugging

8. Your rights

Depending on your jurisdiction you may request access, correction, deletion, or restriction of your personal data.

Contact [email protected] to exercise these rights. We may ask you to verify your identity.

9. Security

We use HTTPS, access controls, hashed passwords, and industry-standard practices to protect data. No method of transmission over the Internet is 100% secure.

10. Children

Photos may include minors at sporting events. Accounts and face search are intended for users aged 18 and over; a minor may use the service only through a parent or legal guardian, who acts and consents on their behalf. Children under 13 may not use face search themselves.

Parents may contact us regarding a child’s data, including to request deletion.

11. Changes

We may update this policy. The “last updated” date at the top will change. Continued use of the site after changes constitutes acceptance.