Privacy Policy

Last Updated: April 6, 2026

Welcome to cdn.pictures. We provide high-performance content delivery and image transformation services. This policy explains how we handle your data when you use our platform.

1. Authentication & Identity

We use Kinde for authentication, which includes integration with Google Auth. When you sign in, we collect:

• Full name and profile identifiers.
• Verified email addresses.
• Unique account identifiers provided by Kinde/Google.

2. Content & Media Storage

As a CDN service, we store and process significant amounts of data to ensure lightning-fast delivery:

• User Uploads: Any media, images, or files you upload to our servers.
• End-User Content: Media uploaded by your own users through our infrastructure.
• Metadata: We extract and store metadata from all accessed content (e.g., file types, dimensions, color profiles, and origin headers).

3. Infrastructure & Logging

To optimize performance and maintain security, we collect technical logs including:

• IP Addresses: Recorded for every request to prevent abuse and provide geo-specific edge caching.
• Access Logs: Detailed records of which files were accessed, when, and by whom.
• Device Data: Browser versions and device types to facilitate dynamic image transformation.

4. Payments & Billing

Financial transactions are handled securely via Stripe. We do not store your full credit card details on our own servers. Stripe provides us with billing identifiers, transaction history, and subscription status to manage your access to premium features.

5. How We Use Your Data

We don't sell your data. We use it to:

• Deliver your content across our global edge network.
• Generate dynamic transformations (resizing, WebP conversion, etc.).
• Detect and mitigate DDoS attacks or fraudulent activity.
• Communicate critical service updates and billing information.

6. Data Retention

Technical logs and access records are typically retained for a period of 6 to 12 months before being purged or anonymized, unless required for active security investigations or legal compliance. Uploaded media is stored as long as your account remains active or until you delete the assets via our API or dashboard.

7. Your Rights (GDPR/UK)

Under UK and EU law, you have the right to access, rectify, or delete your personal data. You may also object to processing or request data portability. To exercise these rights, please contact our support team.

8. Contact

Questions about how we handle your pixels? Reach out at [email protected].