Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Pictame collects, uses, and protects your information when you use our service.

1. Introduction

Pictame ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy describes our practices regarding the collection, use, and disclosure of information when you use our anonymous Instagram viewing service.

By using Pictame, you agree to the collection and use of information in accordance with this policy. We do not require you to create an account or provide any personal information to use our service.

2. Information We Collect

Pictame is designed with privacy in mind. We collect minimal information necessary to provide and improve our service.

Information You Provide

We do not require you to provide any personal information to use Pictame. The only optional information you may provide is:

  • Contact information (only if you reach out to our support team)
  • Feedback or suggestions submitted through our contact form

Automatically Collected Information

When you use our service, we automatically collect certain technical information:

  • Device Information: Browser type and version, operating system, device type (mobile/desktop)
  • Usage Data: Pages visited, time spent on pages, referral source
  • IP Address: Used for security purposes and to prevent abuse (not stored long-term)
  • Language Preference: Stored in cookies to provide content in your preferred language

Information We Do NOT Collect

We explicitly do not collect or store:

  • Instagram usernames you search for
  • Profiles you view
  • Content you download
  • Any personal identifiers
  • Login credentials or account information

3. How We Use Your Information

We use the limited information we collect for the following purposes:

  • Service Provision: To provide, operate, and maintain our service
  • Service Improvement: To analyze usage patterns and optimize performance
  • Security: To detect and prevent fraud, abuse, and unauthorized access
  • Communication: To respond to your inquiries and support requests
  • Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on the following legal grounds:

  • Legitimate Interests: Processing necessary for our legitimate interests in operating and improving our service
  • Consent: Where you have provided consent for specific uses (e.g., analytics cookies)
  • Legal Obligation: Processing necessary to comply with legal requirements
  • Contract Performance: Processing necessary to provide the service you requested

5. Cookies and Tracking Technologies

We use minimal cookies to ensure essential functionality:

Essential Cookies

  • NEXT_LOCALE: Stores your language preference (1 year)

Analytics

  • Google Analytics: We use Google Analytics with IP anonymization to understand how our service is used. This service uses cookies to collect aggregated, anonymized data.

You can manage cookies through your browser settings. Disabling cookies may affect the functionality of our service, particularly language preferences.

6. Data Retention

We retain data only as long as necessary:

  • Server Logs: Retained for up to 30 days for security purposes
  • Analytics Data: Aggregated and anonymized, retained for up to 24 months
  • Support Correspondence: Retained for up to 2 years to improve service quality
  • Language Preference: Stored in your browser, controlled by you

7. Data Security

We implement industry-standard security measures to protect your information:

  • SSL/TLS encryption for all data transmission
  • Secure hosting infrastructure with regular security audits
  • Access controls and authentication for our systems
  • Regular security assessments and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Third-Party Services

We use the following third-party services:

  • Vercel: Hosting infrastructure (GDPR compliant)
  • Google Analytics: Website analytics with IP anonymization
  • Instagram/Meta: We access publicly available content through Instagram's platform

These services have their own privacy policies. We encourage you to review them.

9. Your Privacy Rights

For All Users

You have the right to:

  • Access information we hold about you
  • Request deletion of your data
  • Opt-out of analytics
  • Update your preferences

For EEA Residents (GDPR Rights)

Under the General Data Protection Regulation, you have additional rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten")
  • Right to Restrict Processing: Request limitation of processing
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

For California Residents (CCPA Rights)

Under the California Consumer Privacy Act, you have the right to:

  • Know: What personal information we collect, use, disclose, and sell
  • Delete: Request deletion of your personal information
  • Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
  • Non-Discrimination: Not be discriminated against for exercising your rights

Do Not Sell My Personal Information: We do not sell, rent, or trade your personal information to third parties.

10. International Data Transfers

Our servers may be located outside your country of residence. By using our service, you consent to the transfer of information to countries that may have different data protection laws than your country.

For transfers from the EEA, we rely on:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable

11. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date at the bottom of this page
  • Providing a prominent notice on our service where appropriate

Your continued use of the service after any changes constitutes your acceptance of the new Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: privacy@$pictame.com
  • Data Protection Officer: dpo@$pictame.com
  • General Inquiries: support@$pictame.com

We will respond to your request within 30 days (or sooner as required by applicable law).

Last updated: January 1, 2026

Effective date: January 1, 2026

Privacy Policy - Pictame