Privacy

1. Introduction

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. The use of our website is usually possible without providing personal data. Insofar as personal data (e.g. name, address or email addresses) is collected on our pages, this is done, as far as possible, always on a voluntary basis.

2. Responsible person

3. Collection of data

When you visit our website, certain information is automatically collected and stored in so-called server log files by our hosting provider (browser type, operating system, referrer URL, hostname, time of the request). These data cannot be assigned to specific persons. A combination of this data with other data sources is not made.

4. Use of cookies

Our website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. They serve to make our offer more user-friendly, effective and secure. Most of the cookies we use are so-called 'session cookies', which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them.

5. Rights of those affected

You have the right to free information about your stored personal data, their origin and recipient and the purpose of data processing at any time. You also have a right to correction, blocking or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

6. Email communication and voluntary marketing

Necessary account, security, payment and gallery messages are sent to perform the contract or protect the service. Marketing emails such as tips, surveys, promotions, vouchers and personalised offers are based only on separate consent under Art. 6(1)(a) GDPR. We verify consent using double opt-in and record its time, wording/version, source, language and technical proof. You may withdraw it at any time through the unsubscribe link or at info@foreverpix.me. Necessary service messages remain unaffected.

7. Physical print orders and Stripe

For personalised print orders we process the selected product, finish, event name, QR destination, optional note, email address, order and payment identifiers, and fulfilment status. Stripe collects the billing and shipping address, recipient name and, where provided, telephone number for payment and delivery. Processing is necessary to perform the contract under Art. 6(1)(b) GDPR and to comply with statutory retention duties under Art. 6(1)(c) GDPR. We store only the order and shipping information required for production, support, delivery and legal records. Stripe processes payment data under its own privacy information.

8. Meta (Facebook / Instagram)

With your voluntary cookie consent we use Meta Pixel, provided in the European region by Meta Platforms Ireland Ltd., to measure the effectiveness of advertising: visits to selected public pages and server-confirmed purchases of paid web galleries. The legal basis is Art. 6(1)(a) GDPR and, for storage/access on your device, §25(1) TDDDG. Refusing has no effect on gallery or payment functionality.

Meta receives technical browser information, IP address, cookie/ad-click identifiers, the event and, for a purchase, value, currency and a pseudonymous event identifier. Meta may associate these with your Facebook/Instagram account and use them for advertising. Our integration does not send gallery photos, private gallery URLs, names, emails or payment-provider return parameters. Automatic advanced matching and automatic event detection are disabled. Measurement runs in a separate, neutral page.

Meta cookies such as _fbp and _fbc generally last up to 90 days; browser restrictions may shorten this. Our consent choice/version/time is stored for 180 days. A per-tab retry queue stores only a pseudonymous purchase reference, value and currency for up to 30 minutes; a separate duplicate guard lasts five minutes. Both are removed on withdrawal. Handoff to the Meta script is not confirmation of delivery. You can withdraw future consent at any time via “Cookies” → “Only necessary”. Processing already performed remains unaffected. Data may be processed in the USA; Meta describes transfer safeguards, retention and your rights in the linked policies. For collection and transmission we and Meta act as joint controllers within the scope of Meta’s controller addendum; Meta is responsible for subsequent processing.

Meta Privacy Policy · Meta Cookie Policy · Meta Controller Addendum

9. OpenAI (ChatGPT ads)

With your explicit consent, we measure visits, gallery creation and confirmed web purchases through the OpenAI Conversions API. Legal bases: Art. 6(1)(a) GDPR and §25(1) TDDDG. Refusal does not affect galleries or payments. Earlier consent that did not cover this provider is not sufficient.

We send the event, time, a pseudonymous event reference, purchase amount/currency/package and, when available, the ad click identifier oppref. The source address is always https://foreverpix.me/. Our sender does not transmit gallery addresses, photos, form entries, names, email addresses, customer IP addresses or browser identifiers to OpenAI. No OpenAI browser SDK runs on these pages. OpenAI technically receives the connection from our server.

Our cookies fp_oai_consent, fp_oai_version and, where applicable, fp_oai_click last up to 30 days. Server-side measurement data is deleted after at most 30 days; revocation markers remain for up to 30 days after withdrawal. Use “Cookies” → “Only necessary” to stop new reports and clear local advertising identifiers. Pending reports are discarded once withdrawal reaches the server. If offline, we retain the withdrawal locally until delivered. Previously transmitted data cannot be recalled this way. OpenAI may process data in the USA. Information from OpenAI: OpenAI Privacy Policy.

10. AppLovin (Axon)

With your consent via “Cookies” we use the Axon pixel of AppLovin Corporation (USA) to measure the effectiveness of advertising in the AppLovin network. Legal basis: Art. 6(1)(a) GDPR and, for storage/access on your device, §25(1) TDDDG. Without consent no AppLovin script is loaded; refusing has no effect on gallery or payment.

The pixel runs only on our public advertising pages (e.g. home, occasion and pricing pages), not in galleries or on account, feedback or card-set pages. The script is loaded from s.axon.ai and res4.applovin.com. AppLovin receives technical browser information, IP address, identifiers from cookies or local storage and the address of the page visited. We report page views; if a PayPal checkout takes place on these pages, also package, amount, currency and transaction number. We do not transmit names, email addresses or gallery photos.

We store your AppLovin consent in the cookie fp_axon_consent (365 days) and, to avoid duplicate reports, a marker per order (session storage) or per purchase (local storage); withdrawal removes them. AppLovin determines which cookies it sets and for how long. You can withdraw consent for the future at any time via “Cookies” → “Only necessary”. Data may be processed in the USA. Information from AppLovin: AppLovin Privacy Policy.

11. Live chat (tawk.to)

On our pages and in the help window of the gallery you can chat with us. We use the service of tawk.to inc. (USA). Nothing is loaded from tawk.to and no data is transmitted until you tap “Chat” yourself. Only then is the chat window loaded from tawk.to.

tawk.to then processes your IP address, technical browser and device information, the address of the page you are chatting from, the time and the content of the chat, as well as any name or email address you enter. To continue the conversation, tawk.to stores identifiers in your browser. Legal basis: Art. 6(1)(b) GDPR for enquiries about our offer, otherwise Art. 6(1)(f) GDPR (answering enquiries), and for storage in your browser §25(2) no. 2 TDDDG, because you expressly request the chat. We keep chats only as long as needed to handle your enquiry, unless statutory retention duties apply. Processing in the USA is possible. Information from tawk.to: tawk.to Privacy Policy.