Privacy Policy
What Pixmint stores, which providers see your prompts and images, how long things are kept, and how to delete them.
Last updated:
Summary
- Your prompts and images are sent to AI model providers to make your result, including a provider in mainland China for Seedream models and a third-party relay for GPT Image, Nano Banana and the safety check (which also looks at small copies of generated images).
- We do not use your prompts or images to train models.
- Results are kept 24 hours (guests) or 7 days (free accounts) unless you delete them sooner. Public gallery items stay until you remove them.
- You can delete results and your whole account yourself, or email support@pixmint.ai.
- No advertising cookies.
Who is responsible
Pixmint is operated by an independent founder. Contact for anything about your data: support@pixmint.ai.
What we collect and why
| Data | When | Why | How long |
|---|---|---|---|
| Email address | When you sign in | Your account, one-time sign-in codes, support | Until you delete your account |
| Prompts, uploaded images, generated images | When you generate or edit | To run the job, show your result and History | 24 hours (guests), 7 days (free accounts), or until you delete them; public gallery items until removed |
| Credit balance and usage records | When you use credits | To count credits, refunds and daily allowances | Until you delete your account |
| Safety-check result | With each request and each generated image | To block disallowed requests and images and to decide gallery eligibility | With the request record |
| Reports you file | When you report a gallery image | To hide abusive content and count each reporter once (guests: device cookie and a keyed IP hash, stored with the report) | Until the report is reviewed or the image is deleted; your own reports are deleted with your account |
| Device cookie ID and a keyed hash of your IP address | Every visit that creates a request | To apply the free daily limits and prevent abuse | Usage counters are purged after a few days |
| Technical logs (Cloudflare) | Every request | Operating and securing the site, error diagnosis | According to Cloudflare's log retention |
Where your data goes
Pixmint uses these providers. The table lists what each one receives.
| Provider | What it receives | Why | Notes |
|---|---|---|---|
| Cloudflare | Everything you send to the site, stored images, your email address (for sign-in emails), a Turnstile signal for guests | Hosting, database, image storage, image resizing and watermarking, email delivery, bot check, request logs | Cloudflare processes data in its global network. |
| Volcengine Ark (ByteDance), mainland China | Prompts and images for Seedream requests | Runs the Seedream models | Processed in mainland China and subject to its content rules. According to the provider's published terms it does not use inputs for training without authorization, and it keeps inputs and outputs that trigger its safety filters for 180 days. |
| Third-party API relay (sudocode, www.sudocode.us) | Prompts and images for GPT Image and Nano Banana requests, and the prompt plus small (up to 512 px) image copies for the safety check of every request and generated image | Passes requests to the model makers and runs the safety-check model | We have not verified where the relay operates or how it handles data. |
| OpenAI and Google (via the relay) | Prompts and images for GPT Image and Nano Banana requests | Run the models | According to their published terms, OpenAI's API does not train on API data without consent and Google's paid API does not use it for training. Their other rules apply to them, not to us. |
Before you choose a model, assume the prompt and any images you add can be seen by the providers above. Do not upload anything you are not comfortable sending to them, such as identity documents, bank statements or private photos of other people.
Cookies and local storage
- pm_sid (session cookie, up to 30 days): keeps you signed in. Set only when you sign in.
- pm_did (device cookie, up to 1 year): identifies your browser so the free daily limits can be applied.
- Cloudflare Turnstile: the human check for guests runs in your browser and may use cookies or collect technical signals about your device, under Cloudflare's rules.
- Local and session storage: your light or dark theme, your confirmation of the terms and 18+ notice, this tab's recent results list and an unfinished editor session. These stay in your browser.
- No advertising or cross-site tracking cookies.
Public gallery
Text-to-image results of signed-in users can appear in the public gallery. Free accounts share by default; you can see and change the setting before you generate, switch each result between Public and Private in History, and delete it. A public image is shown with its prompt, the model and a watermark, never your name or email. Never shared: guest images, photo edits, tool results, images made from reference images, and anything our safety check flags as showing a real person. Deleting a result or your account removes its public copy. Anyone who can see a public image can save or share it, and search engines may index its page.
Retention
- Results and uploads: 24 hours for guests, 7 days for free accounts (30 days is planned for paid accounts); an hourly cleanup removes expired items.
- Public gallery items: until their owner deletes them or they are removed after review.
- Sign-in sessions: up to 30 days. One-time codes: expire after 10 minutes and are purged soon after.
- Account, credits and history: until you delete your account.
Your choices and rights
You can delete a single result or all your history in History, delete your account and everything stored with it on the Account page, and change your gallery default there. For anything else, including access to the data we hold about you, correction or deletion requests, email support@pixmint.ai. Depending on where you live you may have legal rights over your personal data; contact us to exercise them and we will do our best to respond within a reasonable time.
Security
The site is served over HTTPS. In our database, sign-in codes and IP addresses are stored only as hashes, and images are served only to their owner unless you make them public. No system is perfectly secure, so we cannot guarantee that data will never be exposed.
Children
Pixmint is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has used the Service, email us and we will delete the data.
International data
Your data can be processed in several countries: wherever Cloudflare's network handles your request, in mainland China for Seedream requests, and wherever the relay and the model makers operate.
Changes
We may update this policy. The "Last updated" date at the top shows the latest version (this version: 2026-10-23). If a change is significant we will say so on the site.
Contact
Privacy questions and requests: support@pixmint.ai.