TELL YOUR FRIENDS! ✦ ✦ WELCOME TO PIXELPLOTS ✦ ✧ NOW WITH ANIMATED GIF TILES ✦ ✦ 200 × 200 PIXELS OF PURE WEB REAL ESTATE ✦ ✧ RENT A FEATURED POPUP — FROM €8 ✦ ✦ CLAIM YOUR COORDINATE TODAY ✦ ✧ UPLOAD ART · LINK SITE · LIVE FOREVER ✦ TELL YOUR FRIENDS!
Privacy Policy

Privacy Policy

Last updated: 15 May 2026.

1. Who we are

The data controller is Aetheron AB, a Swedish limited company registered in Stockholm, Sweden (the “Operator”, “we”). Contact: support@aetheron.se.

2. What data we collect

  • Email address — only if you give it to us at checkout. Used to send your tile management link and operational notices. We never use it for marketing.
  • Country code — derived from the country header on your request (e.g. x-vercel-ip-country). Used for VAT determination. We do not store your IP address.
  • Visitor hash — when someone clicks a tile, we record a one-way hash of (IP + day + secret salt) so we can count unique clicks without storing identifiable information. The hash rotates daily and is not reversible.
  • Payment metadata — Stripe or NOWPayments handles payment details directly; we only receive a payment reference, the amount, and currency.
  • Tile content — the image you upload and destination URL are public by design. Don't upload anything you wouldn't want on the open internet.

3. Sub-processors

  • Supabase Inc. — database and object storage (EU region, Frankfurt). DPA in place.
  • Stripe Payments Europe Ltd. — card payments.
  • NOWPayments OÜ — cryptocurrency payments.
  • Resend.com — transactional email.
  • Vercel Inc. — hosting and edge network. Data in transit only; the database is in Frankfurt.

4. Your rights

Under the GDPR you have the right to access, correct, port, and delete your data. You can export everything we hold on you via /api/me/export and delete your account via /api/me/delete. Both endpoints require you to be signed in.

Note: deleting your account does not remove your live tiles from the public map — those remain visible (because you paid for them) but their link to you is severed.

5. Retention

We keep your email for as long as you own at least one tile, plus seven years to satisfy Swedish accounting law (Bokföringslagen). Visitor hashes are deleted after 90 days.

6. Cookies

We use only strictly necessary cookies (session, locale preference, CSRF). No analytics cookies. See our cookie page for details.

7. Transfers

Your data is hosted in the EU (Frankfurt). Stripe and Resend are US-headquartered and we rely on Standard Contractual Clauses for any unavoidable transfer of operational metadata.

8. Complaints

You can file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you believe we have mishandled your data.