PicSir
Privacy Policy
Summary. PicSir Web is a photo editor that runs inside your browser. Your photos are processed entirely on your device and are never uploaded to us. If you sign in, we keep a small account record (your email, when your free trial started, and whether you have a subscription). Payments are handled by Stripe; we never see your card number. There are no analytics trackers and no advertising.
This policy covers the web version of PicSir at picsir.com. The Android app has its own policy, because it collects different data. Where this policy says "we", it means the maker of PicSir, listed under Contact below.
1. Your photos
When you open a photo in PicSir Web, it is read by your browser and edited there. Every tool, including the on-device AI used for object cutouts, colour splash and object removal, runs in the browser tab on your computer or phone. No photo, edited image, sticker or cutout is ever transmitted to our servers or to any third party. Exports are downloaded straight from your browser to your device.
2. Information we collect
Account (only if you sign in)
Signing in is optional; Adjust, Crop, Heal and Export work without it. If you sign in with Google or with an email address and password, Firebase Authentication (a Google service) creates an account and we receive:
- Your email address, and for Google sign-in your display name and profile picture URL as Google provides them.
- A random account identifier that Firebase assigns.
Email/password credentials are stored and verified by Firebase; we never see your password.
Free trial record
When a signed-in account first uses the editor, our server stores the time the 48-hour free trial started and the time it was last seen, keyed to your account identifier, so the trial cannot be restarted by clearing your browser. If the same email address previously used a trial on an account that was later deleted, the earlier start time is carried over (see section 7).
Subscription record
If you subscribe, Stripe handles the purchase and we store on your account record:
- Your Stripe customer identifier and subscription identifier.
- The subscription status (for example active, past due or cancelled), the end of the current paid period, and whether you have chosen to cancel at the end of it.
- Timestamps for events that change your access: first subscription, refunds, payment disputes.
Your card number, expiry date and security code are entered on Stripe's checkout page and handled only by Stripe. We do not receive or store them. Stripe also collects your billing details, and may collect your postal code, for fraud prevention and tax purposes under Stripe's privacy policy.
Data kept in your browser
Some things are stored only in your browser, on your device, and never sent to us:
- Your sticker library (the cutouts and images you save as stickers), in the browser's IndexedDB.
- Your watermark settings and which reminders you have dismissed, in local storage.
- Your sign-in session, kept by Firebase so you stay signed in between visits.
Clearing site data in your browser removes all of it. We cannot recover a deleted sticker library.
Technical logs
- Our hosting provider records standard web-server logs (IP address, browser type, requested pages, timestamps) when the site is loaded. We use these only to keep the site running and to diagnose problems.
- The small server functions that create Stripe checkout sessions and receive Stripe's payment notifications write operational logs on Google Cloud that include your account identifier and the outcome of the event.
3. Information we do not collect
- Your photos, edited images, stickers or exports.
- Your card number or bank details.
- Analytics or behavioural tracking. The site includes no analytics library and no advertising or tracking cookies.
- Location, contacts, or anything else from your device.
4. How we use information
- To sign you in and keep you signed in.
- To run the free trial and to know whether your account has an active subscription, so the right tools are unlocked.
- To take payment, issue refunds, and respond to payment disputes.
- To answer support requests you send us.
- To keep the service secure and working.
We do not sell personal information and do not share it for advertising.
5. Third-party services
| Service | What it does | Policy |
|---|---|---|
| Firebase Authentication, Cloud Firestore and Cloud Functions (Google) | Sign-in, the account, trial and subscription records, and the server functions that talk to Stripe. | Firebase privacy |
| Firebase App Check with reCAPTCHA Enterprise (Google) | Checks, invisibly, that requests to the account, trial and subscription records come from this website and not from a script. reCAPTCHA collects hardware and software information such as device and browser data to make that decision; it does not show puzzles and is not used for advertising. | Google privacy · terms |
| Stripe | Checkout, recurring billing, receipts, refunds and the customer portal. | Stripe privacy |
| Hostinger | Serves the website files. | Hostinger privacy |
6. Where data is stored and how it is protected
Account, trial and subscription records are held in Google Cloud Firestore, in Google's data centres in the United States, and reach your browser only over HTTPS. Access rules allow your account to read its own record and nothing else; no browser can write the subscription record, which is updated only by our server function in response to verified Stripe events. Payment data lives with Stripe, which is certified to the PCI DSS standard.
7. How long we keep it, and how to delete it
- Your account, trial and subscription records are kept while your account exists.
- You can delete your account yourself at any time from the Account page. That immediately cancels any active subscription, removes your Stripe customer, deletes your account, trial and subscription records, and deletes your sign-in. You can also email us to have it done for you within 30 days.
- After deletion we keep one thing: a one-way hash of your email address together with the date your free trial started, so that a new account made with the same email resumes the trial it already used rather than starting a fresh one. The hash cannot be turned back into your email and is used for nothing else.
- Stripe retains transaction records for as long as financial and tax law requires, typically seven years. We cannot shorten that.
- Data kept only in your browser is under your control and is removed when you clear site data.
8. Cookies and similar storage
PicSir Web sets no advertising or analytics cookies. The only browser storage used is strictly necessary: the Firebase sign-in session, your sticker library, and your editor settings, all described above. Stripe's checkout page, when you visit it, uses its own cookies for fraud prevention.
9. Children
PicSir Web is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
10. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, to object to or restrict its processing, and to complain to a data protection authority. Everything we hold about you is listed in section 2; to exercise any of these rights, email us. We will respond within 30 days. Residents of California may also request the categories of information we collect and confirm that we do not sell it.
11. Changes to this policy
We will post any changes on this page with a new effective date. If a change materially affects how we use your information, signed-in users will see a notice in the app before it takes effect.
12. Terms of Service
Use of the Service is also governed by the Terms of Service, which cover the subscription, cancellation and refunds.
13. Contact
PicSir Web is made by LowLevL LLC, Indiana, USA. Questions, deletion requests and refund requests: support@picsir.com.