Privacy policy

This Privacy Policy explains how ExtractPics ("we", "us", "our"), operated by Bipul, handles information when you use extractpics.com or the ExtractPics Chrome extension. The website and extension work differently, so their data practices are described separately below.

Information the website collects

When you use extractpics.com, we collect the following information to provide and maintain the website service:

• Account information: If you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.
• Email preferences: Your Google account email is used for account email. We store your choice for each optional category (product news, offers, tips and reminders), when and how each choice changed, a record of the emails we sent you with delivery status, and whether an address is suppressed after a bounce or spam report.
• Account activity: We record when you signed up, when you last signed in or used the site, and on how many days you were active, to decide which account and reminder emails apply and to grant bonus-credit rewards.
• Pro plan purchase information: When you buy a Pro plan, our reseller (Paddle or Gumroad) collects your payment details directly; we never receive full card numbers. We receive your email address, country, order, customer and subscription identifiers, plan, amount, currency, and payment, renewal, refund, or dispute status so we can apply the plan to your account. If you claim a purchase with a license key, we process the license key for verification and store limited normalized purchase details, provider identifiers, a one-way keyed fingerprint of the license, verification and refund or dispute status, purchase and claim times, and the ExtractPics account linked to the purchase. We do not auto-link purchases by email or store payment-card details.
• Usage data: We collect anonymized analytics through Google Analytics (loaded via a Partytown web worker) to understand how the Service is used.
• URLs and tool results: Submitted public URLs are processed by our servers. Anonymous results are temporary. When you are signed in, image extractions and supported tool results, with their source URL, may be saved to your private run history for a period set by your plan (up to 90 days) so you can reopen or delete them.
• Log data: Our servers and our hosting provider may automatically log standard technical data such as your IP address, browser type and version, pages visited, and the time and date of your visit.

Account emails

Account emails are about your own account and are sent regardless of marketing choices: a welcome message when you create an account, a notice when bonus credits are added to your account, and genuine account, legal, or security notices.

• Hard bounces and spam complaints stop all email to that address, including account email.

Product emails and consent

Product news, offers, and tips and reminders are optional and sent only if you agree. The sign-in checkbox is never selected for you, and because you sign in with Google your address is already verified, so there is no separate confirmation step.

• You can turn each category on or off in Email Preferences when signed in.
• Every optional email includes a one-click unsubscribe link that works without signing in and takes effect immediately.
• Reminder emails depend on your activity (for example, after two weeks away) and are limited to one every three days.
• Optional emails contain a small image and tracked links so we can count opens and clicks. We use these counts only in aggregate and to stop emailing people who never engage.
• Unsubscribing from optional email does not stop account emails.

How we use your information

• To provide and maintain the image extraction Service
• To manage your account and track usage quotas (free tier limits)
• To verify and link one-time or monthly Community Support purchases, provide Pro credits and badges, prevent replay or fraud, and respond to renewals, cancellations, refunds, and disputes
• To understand usage patterns and improve the Service
• To display advertising that helps keep the Service free
• To communicate important updates about the Service

We do not sell or rent your personal information to third parties for their own marketing purposes.

Cookies and similar technologies

A cookie is a small piece of data stored on your device. We and our partners use the following categories of cookies:

• Essential cookies: Secure, HTTP-only cookies keep you signed in and assign an anonymous browser identifier used for the shared daily credit balance and 24-hour access pass. The identifier does not contain your name or email.
• Guest network limit: So one person cannot reset the guest allowance by clearing cookies, guest credit use is also counted per network. We do not store your IP address for this: we keep a keyed one-way hash of the IPv4 address or IPv6 /64 network combined with the date, so it cannot be linked across days. The network operator number (ASN) is read at request time to recognise shared mobile networks and is not stored. These records are deleted after two days. When a network is busy you may be asked to complete a Cloudflare Turnstile check, which Cloudflare processes under its own privacy policy.
• Analytics cookies: Set by Google Analytics to measure site usage. These are loaded in a web worker and do not block page rendering.
• Advertising cookies: Set by Google AdSense and its partners to serve and measure ads (see the section below).

You can use most of the Service without signing in. Most browsers let you refuse or delete cookies through their settings; doing so may affect some features. See our Cookie Policy for more detail.

Advertising & Google AdSense

We use Google AdSense, a third-party advertising service provided by Google, to display advertisements on this site. Advertising revenue helps us keep ExtractPics free to use.

When you are signed in with a valid Pro badge, our server suppresses advertising placements, AdSense verification metadata, and the Google AdSense script. This ad-free benefit lasts while the applicable Pro badge is valid. It does not remove cookies that Google or other sites may previously have stored in your browser, and our separate first-party product analytics may still operate as described in this policy.

• Google, as a third-party vendor, uses cookies to serve ads on our site.
• Google's use of advertising cookies (including the DoubleClick DART cookie) enables it and its partners to serve ads to you based on your visit to our site and other sites on the internet.
• Third-party vendors and ad networks may also use cookies, web beacons, or similar technologies to collect information (such as your IP address, browser, and pages viewed) in order to measure and personalize ads.
• We do not have access to or control over the cookies used by these third-party advertisers.

You can manage or opt out of personalized advertising using the following resources:

• Review Google's advertising practices at policies.google.com/technologies/ads.
• Opt out of personalized Google ads via Google Ads Settings.
• Opt out of third-party vendor cookies at aboutads.info/choices and optout.networkadvertising.org.

If you are in the European Economic Area, the UK, or another region where consent is required, ads may be limited to non-personalized advertising unless you provide consent.

Third-party services

We rely on the following third-party services, each governed by its own privacy policy:

• Cloudflare: Hosting, CDN, edge security, bot protection, subscription storage, and transactional email delivery. See Cloudflare's Privacy Policy.
• Paddle: Paddle.com is the Merchant of Record and authorized reseller for Pro plan orders placed through Paddle checkout. Paddle handles checkout, payment credentials, receipts, invoices, applicable taxes, renewals, refunds, and payment processing, and shares with us the order and subscription information needed to provide the plan. See Paddle's Privacy Policy.
• Gumroad: Merchant of record for Pro plan orders placed through Gumroad checkout. Gumroad handles checkout, payment credentials, receipts, applicable taxes, renewals, and payment processing, and sends us the purchase and lifecycle information needed to verify perks, refunds, and disputes. See Gumroad's Privacy Policy.
• Google AdSense: Advertising. See Google's Privacy Policy.
• Google OAuth: Authentication for sign-in. See Google's Privacy Policy.
• Google Analytics: Anonymous usage analytics. See Google's Privacy Policy.

Data retention

Account information is retained while your account is active. Subscription records and consent events are retained as needed to prove and honor your choice, including after unsubscribe; delivery logs omit message content and are retained for reliability and suppression enforcement. Anonymous run results are temporary. Supported signed-in tool results are kept for the period set by your plan (up to 90 days) unless you delete them sooner; scheduled cleanup removes the stored result files after expiry. Daily credit ledger entries and transaction records may be retained for abuse prevention and accounting. Analytics and advertising data follow Google's retention policies.

For Community Support records, failed claim-attempt rows are deleted after 24 hours. Normalized provider events and invalid, unclaimed purchase records are retained for 180 days. A valid linked purchase is retained while the account and badge exist. After account unlinking or final purchase invalidation, we retain only the provider identifiers and license fingerprint for 24 months to prevent replay and handle refund or fraud issues, then delete them unless a documented legal hold applies. We do not keep raw Gumroad event payloads, purchaser email, or payment credentials in these records. You can request deletion of your account data at any time by contacting us, subject to these limited anti-fraud and legal retention needs.

Your rights

Depending on where you live (for example under the EU/UK GDPR or the California CCPA), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing, including personalized advertising
• Withdraw consent for data processing at any time
• Use the Service without creating an account (with a smaller daily global credit balance)

To exercise any of these rights, contact us using the details below. We will not discriminate against you for exercising your privacy rights.

Children's privacy

The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

International transfers

We and our service providers may process and store your information in countries other than your own, including the United States. Where required by law, we take appropriate steps to ensure your information is protected in accordance with this policy.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

For Chrome extension privacy questions, email bipul281c@gmail.com. For website privacy questions, email blog.boopul@gmail.com. You can also use our Contact page.