Privacy policy

1. Data controller

PixMomento operates the platform at pixmomento.com.

For privacy inquiries contact: bcjj.ru@gmail.com

2. Information we collect

We may collect the following categories of data:

• Account data: name, email, password hash, language preference, optional profile fields (e.g. belt)
• Order data: purchased items, tournament, amounts, payment status, guest email for checkout without registration
• Usage data: pages viewed, search queries (tournament/name), favorites stored in your account or browser
• Face search: a selfie you upload is processed in memory to find matching photos. We do not store the selfie file on disk or in cloud storage
• Face search metadata: session identifiers, match results, and timestamps may be stored to provide the service and prevent abuse
• Photographer/event leads: data submitted through contact forms (name, email, phone, message)
• Technical data: IP address, browser type, device information, cookies and local storage tokens for authentication and cart

3. How we use information

• Provide photo search, gallery, cart, and checkout
• Process payments through Stripe and deliver download links by email
• Run face matching using AWS Rekognition on tournament photo indexes
• Maintain your account, favorites, and order history
• Respond to support requests and manual merchandise orders
• Secure the platform, prevent fraud, and comply with legal obligations

4. Photo visibility & consent

Tournament photos are stored on our servers but are not shown on the public site until you give explicit consent through face search.

When you use face search, you must check a consent box confirming you are searching for your own photos. Only then will matching previews (with watermarks) be shown to you.

After you purchase and download an original, watermarked previews of those photos may remain visible in the tournament catalog for other buyers. Original files are never available without payment.

You may hide your photos from the public catalog or revoke consent entirely in account Settings. Revocation does not delete files from our servers but removes your access and public visibility.

5. Face search & biometric data

When you use face search, you upload a photo containing your face. The image is transmitted securely to our servers, analyzed in memory, and compared against indexed faces from the selected tournament.

We do not persistently store your selfie. AWS Rekognition compares faces without retaining the uploaded selfie for future use.

Indexed face data derived from tournament photos is used solely to enable search within that event. When photos are removed, associated face index entries are deleted.

By using face search you confirm you are searching for photos of yourself or have permission from the person pictured.

6. Sharing & processors

We share data only as needed to operate the service:

• Stripe — payment processing (card data is handled directly by Stripe)
• Amazon Web Services (S3, Rekognition) — photo storage and face matching
• Resend or similar — transactional email (order confirmations, verification)
• Cloudflare — CDN, security, and DDoS protection
• Hosting provider — application and database hosting

7. Retention

• Account and order records — while your account exists and as required for tax/accounting laws
• Guest order records — linked to email for download and support
• Selfie uploads — not retained after the search request completes
• Server logs — limited retention for security and debugging

8. Your rights

Depending on your jurisdiction you may request access, correction, deletion, or restriction of your personal data.

Contact bcjj.ru@gmail.com to exercise these rights. We may ask you to verify your identity.

9. Security

We use HTTPS, access controls, hashed passwords, and industry-standard practices to protect data. No method of transmission over the Internet is 100% secure.

10. Children

Photos may include minors at sporting events. Accounts are intended for users 16+ or with parental consent. Parents may contact us regarding a child’s data.

11. Changes

We may update this policy. The “last updated” date at the top will change. Continued use of the site after changes constitutes acceptance.