Privacy Policy

As of: October 2026

We take the protection of your personal data seriously. Here you can find out which data we process on mypixel.site, what we use it for and which rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Jörg Lunkewitz
Reifarthstr. 13
42349 Wuppertal, Germany
Email: info@mypixel.site
Phone: +49 202 7699000

2. Overview

On this site we use no analytics, tracking or advertising services and we load no fonts, scripts or maps from third parties. The map data is delivered by our own server. Only when you expressly click, can a street map from OpenStreetMap additionally be loaded (section 8). The PayPal payment module is loaded only when you open the purchase dialog (see section 5). We do not set any cookies for visitors that require consent.

3. Hosting and server log files

The site is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS.

With every visit, the server processes technically necessary data in log files: IP address, date and time, page or file requested, amount of data transferred, status code, and browser and operating system (user agent). We process this data to deliver the site, to ensure security and to fix errors (Art. 6(1)(f) GDPR, legitimate interest in secure and stable operation). The log files are deleted automatically after a short time of eight Weeks.

4. Purchasing a block

When you buy pixels, we process the following data to perform the contract (Art. 6(1)(b) GDPR):

• the selected pixels (position and size of the block) and the price,
• the order number, the payment amount and the time of payment,
• the email address that PayPal sends us,
• a randomly generated personal link (token) that you use to edit your block.

We receive no account details, card numbers or bank details from PayPal. For tax and commercial law reasons we must keep booking data for the statutory periods (Art. 6(1)(c) GDPR, e.g. § 147 AO, § 257 HGB). We send the confirmation email with your personal link via our host's mail server.

5. Payment via PayPal

Payment is made exclusively via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). We load the payment module only when you open the purchase dialog. In doing so, your IP address is transmitted to PayPal, and PayPal may use technically required cookies or similar technologies to process the payment and prevent fraud. PayPal is itself responsible for processing the payment data. PayPal's privacy statement applies. Data may also be transferred to countries outside the EU. The legal basis for our integration is Art. 6(1)(b) GDPR.

6. Uploaded content (image, title, link, location pin)

For your block you can upload an image, a title, a link and a location pin (position, title and text). This content is displayed publicly on the internet as soon as we have approved it. Please publish only information that you really want to make public, and no data of third parties without their consent (e.g. recognisable persons, home addresses).

• Images: We store a reduced preview and a large view. When resizing, metadata such as the shooting location (GPS) and camera data are not carried over.
• Review: We review the content manually before it is displayed in order to prevent unlawful content.
• Legal basis: Performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in a lawful platform (Art. 6(1)(f) GDPR).
• Storage period: Until the block is deleted, the contract term ends or you change the content. Replaced images are deleted.
• Sharing: Every approved block has its own address for sharing. When someone shares this address in a messenger or social network, these services retrieve the title, text and a preview image from our site. The “Share” button itself transmits no data to us.
• Note: Published content can be copied and stored by third parties (e.g. search engines or other visitors). After publication we have no influence on this.

7. Address search and OpenStreetMap

If you search for an address in the map or for the location pin, you send your input to our server. Our server forwards it to the Nominatim search service of the OpenStreetMap Foundation (United Kingdom) and shows you the results. Your IP address is not transmitted to OpenStreetMap, only the address of our server. The search starts only on your input (Art. 6(1)(b) GDPR). Please note that an address can be personal data.

We cache the results for up to six hours to relieve the search service. To protect against misuse we limit the number of searches. For this purpose we use, for ten minutes, a hash of your IP address formed with a secret additive (Art. 6(1)(f) GDPR). The search itself is not linked to your person.

The site also contains links to openstreetmap.org. Only when you click such a link does the OpenStreetMap site open, and its own privacy provisions apply there.

8. Street map (OpenStreetMap)

On request you can view the location of your block, or the place for your location pin, on a street map. The map library (Leaflet) is stored on our server. Your browser loads the map images only when you click “Load street map” in that window, and it does so directly from the servers of the OpenStreetMap Foundation (United Kingdom) . In doing so, your IP address, the address of our site (referer) and the map section shown (as tile numbers) are transmitted. The provider may process this data in accordance with its own privacy policy.

The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without the click, nothing is transmitted. You can close the window at any time; withdrawal takes effect for the future. Your choice is remembered only by your browser for the duration of the session (sessionStorage) and is not sent to us. The street map is not required to use the site: you can also choose your place through the address search, with coordinates or on our map.

9. Reporting content

Visitors can report content using the “Report” function. We store the reason, an optional note, the time and a hash of the IP address formed with a secret additive (pseudonymisation). It serves only to protect against misuse (at most five reports per hour). The legal basis is our legitimate interest in handling violations of the law and in protecting against misuse (Art. 6(1)(f) GDPR). Reports are deleted once they have been dealt with and possible limitation periods have expired.

10. Contact by email

If you contact us by email, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete them as soon as the enquiry has been dealt with and no statutory retention obligations stand in the way.

11. Cookies and local storage

The site sets no cookies for visitors that require consent and uses no tracking technologies. If you choose a language, we store your choice in a cookie named “lang” (duration: one year). It is technically necessary to remember the language you expressly selected and contains no personal data (Section 25(2) no. 2 TDDDG). Visitors whose browser language is not German see a notice about the English version; whether you closed it is remembered only by your browser for the duration of the session (sessionStorage) and is not sent to us. For the administration area, which is accessible only to the operator, a technically necessary session cookie is used. For the PayPal payment module, see section 5.

12. Recipients of the data

Recipients of your data are our host IONOS (processor), PayPal (independent controller for payment processing) and, if you use the address search or the street map, the OpenStreetMap Foundation (for the address search without your IP address, for the street map with your IP address but only after your click). Publicly displayed content is visible to all visitors. We pass on data beyond that only if we are legally obliged to do so, for example to authorities, or if it is necessary to enforce legal claims.

13. Security

Transmission between your browser and our site is encrypted (HTTPS). Access credentials and the database are protected against direct access. The personal link to your block must be treated confidentially.

14. Your rights

Under the GDPR you have the following rights:

• access to the data stored about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17) and restriction of processing (Art. 18),
• data portability (Art. 20),
• objection to processing based on legitimate interests (Art. 21).

To exercise them, an email to the address above is sufficient. Where we process data on the basis of your consent, you can withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, for example LDI NRW.

15. No automated decision-making

There is no automated decision-making, including profiling.

16. Changes

We adapt this policy if the site or the legal situation changes. The current version on this page applies.