Privacy & photo retention

PicToPC is a temporary bridge between taking product photos and downloading them to your computer.

eBay listing backups

If you connect eBay, PicToPC saves the listing details, descriptions and copies of the listing photos you choose to back up. These backups are private to your account and are separate from the photo library’s expiry dates. We keep them until you request their removal or close your PicToPC account.

eBay handles your sign-in. We store encrypted access tokens so you can back up and relist without entering your eBay password here. Clicking Relist sends the saved details and photos to eBay and publishes a listing. Disconnecting eBay removes PicToPC’s stored tokens; it keeps your saved backups. PicToPC and Seller Signal share an eBay developer app. Removing that app’s access in your eBay account settings may affect both services. Contact support to remove your saved backups.

Optional Google Analytics

Analytics is optional and off until you allow it separately on the website, in Android Settings, or in the Chrome extension popup. You can use PicToPC without allowing analytics and turn it off at any time.

When allowed, Google Analytics measures general use, such as pages or app screens opened, app download clicks and extension transfers prepared. It uses random browser or app identifiers and general device information. Website and Android analytics may derive approximate region from your connection. We disable advertising identifiers, Google signals and ad personalisation. We do not send photos, videos, listing titles, descriptions, notes, SKUs, storage locations, prices, emails or PicToPC account identifiers. Website page addresses are limited to fixed page names without search terms, referral codes or other query parameters.

The extension sends only a random identifier, its version and fixed usage event names through our Cloudflare relay to Google. Its IP address is not forwarded to Google; a temporary salted hash limits requests and expires within two minutes. Analytics is separate from the photo-transfer process.

Google Analytics user-level and event-level data retention is set to two months, without restarting retention when you return. Aggregate standard reports may remain available longer. Website analytics cookies last up to 180 days. Turning analytics off stops future collection and clears the local website cookies or extension identifier; Android also resets its local analytics data. This does not automatically erase previously collected reports. Google processes analytics data under its privacy policy and explains how it uses information from apps and sites. Use the controls below for this browser, Android Settings for the app, and the extension popup for the extension.

Optional Meta advertising measurement

With your separate permission, we send Meta (Facebook and Instagram) public page visits, confirmed free account registrations, checkout starts and the first paid subscription. We use Meta’s Conversions API through our server. Renewals, free trials and abandoned checkouts are not reported as new paid subscribers. This helps measure which ads lead to customers and improve ad delivery.

Matching information includes a random browser reference, a Meta ad-click reference when present, IP address and browser information. After sign-in, your verified email is converted to a SHA-256 hash before sharing. Hashing is not anonymisation: Meta can use it to match your Facebook or Instagram account. Subscription events include the amount paid and currency. We never send passwords, photos, videos, listing details, payment card details, referral codes, authentication links or private page addresses.

Advertising is off until you allow it. Your choice and ad-click reference last up to 90 days. We retain consent and matching information for up to 90 days, and delivery records for up to 90 days. Failed event delivery is retried for up to six days while consent remains valid. You can turn it off below; we stop future collection from this browser, clear its saved ad-click reference and cancel events still awaiting delivery when your choice reaches our server. Previously shared data remains subject to Meta’s privacy policy. This website choice does not enable advertising tracking in the Android app or Chrome extension.

Optional Google Ads measurement

Google Ads measurement is separately optional and off until you allow it. Google uses ad-click references, browser cookies, IP address and device information to connect your ad interaction with a paid PicToPC subscription. After Stripe confirms payment and you return to PicToPC, we send the amount paid, currency and a hashed receipt reference to prevent duplicate counting. Free trials, abandoned checkouts and recurring renewals are not counted.

We do not send your email, account identifier, payment card details, photos or listing details to Google Ads. Enhanced conversions and ad personalisation are disabled. This choice is separate from Google Analytics and Meta and lasts up to 90 days. Ad-click cookies and local duplicate prevention references also last up to 90 days. You can turn it off below; this clears ad-click cookies and stops future purchase events. Previously collected information remains subject to Google’s privacy policy.

What we store

Your account uses an email address, with a securely managed password or Google or Facebook sign-in where available. We also retain any display name you previously provided. Your library contains the photos and videos you upload, batch and item titles, SKUs, storage locations and notes you add.

If you choose Facebook sign-in, Meta shares your account identifier, email address and basic profile with our authentication provider to create or access your PicToPC account. Facebook sign-in does not enable optional advertising measurement. You can request deletion of your PicToPC account and associated data at Delete account.

App and extension setup status

When you are signed in, we keep the first and most recent time the Android app connects and the Chrome extension responds to your website library. Existing native app sign-in records may also show earlier app access. We record signed-in clicks on our app and extension download links separately; a click is not proof of installation. We cannot identify an account from a QR scan or a direct store visit.

These account support records help us understand incomplete setup and support your connection. They are visible only in our private owner dashboard, stay until you delete your account, and are not sent to Google Analytics or Meta. We store the product, first and last recorded dates and type of evidence, without adding device identifiers or tracking other apps, extensions or browsing activity. This is separate from optional analytics.

Google sign-in

If you choose Google sign-in, Google shares your email address and basic profile information, such as your name, profile picture and Google account identifier, with our sign-in service, Supabase. We use this to create or recognise your PicToPC account. We do not receive your Google password or request access to your Gmail, Drive files or contacts. Email and password sign-in remains available.

On Android, sign-in opens in your browser and returns to the app. Pending sign-in details are saved in encrypted private phone storage so an interrupted account setup can be retried. A temporary sign-in record also preserves any referral code you chose before leaving PicToPC. These server records and privacy-preserving request limits are removed on a subsequent sign-in request once they are more than 24 hours old. A completed referral keeps the retention rules below.

Links from our ads

If you open one of our ad links, we save a random receipt in your browser for up to 30 days. If you create a PicToPC account in that browser, we link the first ad visit to your signup. Our private owner report shows how many people sign up, finish uploading a photo, upload again on a later day, and pay for a subscription.

This first-party report is separate from optional Meta measurement above. Request limits use a short-lived, hashed network identifier instead of storing your IP address in the tracking records. Expired visit receipts and request limits are cleared on later tracking requests. The link to your account is removed when you delete your account.

Your library is private

You must log in to access your library. Access rules check ownership and staff membership. Staff you authorise can view and download your photos, item titles, SKUs, batches, stock locations, notes and condition details. They cannot upload, edit or delete your photos or item details. Use a unique password and log out on shared computers.

Photo expiry: 30 days Free, 90 days Standard, 180 days Ultra

Each photo becomes unavailable 30 days after upload on Free, 90 days on Standard, or 180 days on Ultra. The deadline is set at upload; changing plans does not change existing deadlines. Already expired photos are not restored. Automatic cleanup runs hourly to remove expired files and their photo records. Processing delays or service interruptions can delay physical deletion; expired photos remain inaccessible through your account.

Download anything you want to keep before it expires. Downloads are saved on your device and are not removed by PicToPC’s cleanup. Your account and item details remain until separately removed; PicToPC is not a photo backup service.

Deleting photos yourself

Select files or use an item’s Delete button to move them to Trash. Manually deleted items and files are hidden from the active library and kept for 30 days from deletion, including their recovery copies. You can restore them from Trash on the website during that time. After the restore deadline they become inaccessible and automatic cleanup removes their stored files. Repeating a delete while a file is already in Trash does not extend its deadline.

Restoring returns the remaining files to their original item and batch, with their listing status and order preserved. Restored files keep whichever is later: their previous expiry date or their Trash restore deadline. Files that reach their normal expiry without being manually deleted are cleaned up directly and do not enter Trash.

Standard and Ultra item videos can be up to one minute long and may include sound. The app uses your microphone only when you enable sound for a recording and grant microphone permission. You can also record silently or import a video. Uploaded videos use the same private account and staff access rules as photos and expire after 90 days on Standard or 180 days on Ultra, based on the plan at upload. A default video chosen in Settings is saved privately on that phone and copied to each new item while the default-video option is enabled.

Delete your account and associated data

To request removal of your PicToPC account and associated data, use our account-deletion request page. You can contact support without signing in or reinstalling the app. Ownership is verified before deletion. The page explains the data covered, subscriptions and records that may need to be retained.

Plans and staff access

We retain monthly upload counts separately from photo files to enforce the Free and Standard allowances. Deleting a photo does not reset that count. Staff invitations store the invited email and account relationship. Removing staff blocks future access; it cannot recall files already downloaded.

Standard and Ultra are billed monthly or annually by Stripe. Stripe processes payment-card and billing details; PicToPC stores only Stripe customer and subscription references, plan status and the paid-through date needed to provide paid-plan access. Card details are not stored by PicToPC. You can manage or cancel billing from your account page.

Optional Chrome extension

PicToPC’s extension transfers the photo group you select to a supported marketplace listing draft. It temporarily processes the group title, image files, the selected item video, item location–SKU, condition and condition note, listing description and optional GBP price. Internal item notes and PicToPC login credentials are not sent to the extension. When any listing-field option is enabled, the selected item’s transferable details are received together; only the fields you enable are inserted.

The extension reads the active tab’s address to recognise supported listing editors and uses source-tab and document references to bind your selection to the correct PicToPC library. It reads relevant upload controls and listing fields to locate them and detect changes during transfer. It does not request access to your browser history database or build a browsing-history log.

Selected photos are handed to the upload control on the marketplace you choose: eBay, or the preview integrations for Facebook Marketplace, Etsy and Vinted. Optional SKU, condition, description and price filling is currently eBay-only. These marketplaces process uploaded copies under their own privacy policies. PicToPC’s deletion schedule cannot delete copies you transfer elsewhere.

The extension does not send your photos or listing details to a separate extension server or sell your data. Optional usage analytics is off by default and described above. We do not use extension data for advertising, unrelated purposes, creditworthiness or lending decisions.

Selection references use browser-session storage and expire after 15 minutes; expired references are removed when next checked or when the browser session ends. Staged photo files and listing fields use temporary memory, cleared after completion, cancellation or ten minutes. Refreshing the source library or signing out invalidates the selected group. Existing PicToPC cloud storage retains its separate photo-retention rules.

Permissions cover session storage, optional local analytics preferences, requests to PicToPC’s analytics relay, packaged script execution after your action on a supported listing, and content scripts on PicToPC’s library and listing-editor pages on supported international eBay domains, including regional Belgian and Canadian sites. No remotely hosted extension code is executed. For controls and limitations, read the extension guide. For privacy questions or a data-deletion request, contact Continue Technology.

Demo usage

We count demo opens and actions such as viewing sample photos, trying the extension and clicking Create account. A random reference kept in page memory joins actions from that demo page and its transfer tab. Refreshing starts a new reference. We do not use tracking cookies or browser storage for these counts, or attach them to your account. Only the owner can see the report. Demo records are removed after 90 days during regular collection. A keyed, hourly IP hash limits abuse and is cleared after one day; raw IP addresses are not saved in these tracking records.

Affiliate referrals

If you create an account with a valid referral code, we store the original affiliate relationship with your account so a later paid upgrade can be attributed to that affiliate. A referral link carries its code in the signup address. You can see, change or clear the optional code before signing up. Eligible new referred accounts receive two calendar months of Standard from email confirmation without a card; we store its fixed start and expiry dates to apply the offer once.

30-day referral cookie

If you choose Allow referral cookie, pictopc_referral stores the first valid affiliate code and its expiry on this browser for 30 days. It helps credit the affiliate if you return to sign up later. It contains no email, photos or payment information. Revisiting does not renew its lifetime. We clear it after successful signup; the original referral then stays with your account. A disabled code is checked again and ignored. You can still use a direct referral link without this cookie.

The pictopc_referral_consent preference cookie remembers your Allow or Not now choice for up to 180 days. These are first-party cookies, set for this website with Secure and SameSite protections. You can withdraw permission below at any time. Clearing browser cookies or switching devices also removes the remembered referral for that browser.

Affiliates see aggregate confirmed-signup and payment totals, not your email, photos or private account details. Referral relationships and commission records are kept separately from photos and are not removed by the photo-retention photo cleanup. Verified Stripe payments and refunds update aggregate commission records. Affiliates can save their PayPal email and request payouts from £50. We store the requested amount, a snapshot of that email, payout status and the PayPal payment reference for administration and accounting. These details are private to that affiliate and authorised administrators.

Referral signup links also record aggregate click totals. A random visit ID held in page memory avoids duplicate requests from that page. It is not saved to browser storage. The click service uses an hourly changing keyed digest of the request’s network address for basic abuse limits; it does not store raw IP addresses in the affiliate tables. Visit IDs and rate-limit digests are removed on subsequent tracking requests after 24 hours; aggregate totals are retained. Click tracking does not reveal a visitor’s identity to the affiliate and a tracking failure does not prevent signup.

Service providers

Cloudflare hosts the website and provides private R2 photo and video storage. Supabase provides authentication, the database and private recovery copies of uploaded files. Recovery copies follow the same expiry dates and deletion requests; physical removal completes on the next successful cleanup run. Stripe provides subscription checkout, payment processing, invoices and the billing portal. These providers may retain operational logs and backups according to their own retention policies; the photo-retention rule describes access and removal from PicToPC’s active photo library.

Browser storage

PicToPC stores your login session in your browser so you can stay signed in. Optional website advertising measurement follows your separate choice above. The public sample library uses example photos and is separate from your private account.

iOS launch notification

If you join the iOS waiting list, we store your email address and consent date privately to notify you when the iPhone app becomes available. This does not create an account or subscribe you to other marketing. Contact Continue Technology below to request removal.

Full-resolution photos cached on your device

Your browser can save unchanged, full-resolution photo and video files locally so refreshing the library, viewing media, downloading and preparing marketplace transfers can reuse them. Videos are downloaded when you preview or transfer them. This cache is separate from temporary marketplace copies. Library access is checked online before reuse; cached files do not provide offline access.

Cached photos are separated by signed-in account. Signing out clears saved copies, and expired, deleted or no-longer-accessible photos are removed when the library checks them. You can use Clear saved copies in the library at any time. Up to 2 GB is kept, with older copies removed when space is needed. Your browser may clear cached data or refuse to store it when disk space is low. Clearing browser data also removes it. These are local copies on this device; protect access to your browser and computer.

Preparing a marketplace transfer

Choosing Send to marketplace downloads the selected photos into temporary browser memory. This lets the extension transfer them sooner. The prepared files are cleared when you choose another group, change accounts or workspaces, close the library, or after 15 minutes. Access is checked again before transfer. Quantity, when supplied, is included with the selected listing details.

Photos on your Android phone

Viewed photos are cached unchanged in encrypted, private device storage for up to 14 days from their first download, or until their cloud expiry if sooner. These copies are excluded from Android backup and device transfer. The cache is limited to 1 GB; older copies may be removed earlier when space is needed. Expired entries are never reused and are cleaned up when the app accesses the cache or restores your plan. Deleted photos are removed when the app refreshes that item. Signing out clears the cache. You can also clear it from Settings without removing unsent photos or cloud originals.

The app encrypts your session, item details, queued photos and prepared videos in private device storage. In Next item mode, queued media stays on your phone until you release it for upload. Queued files are removed after the website confirms a successful upload, or when you explicitly discard them. Cloud retention starts after upload.

Camera recordings are written to private phone storage excluded from backups, with their original account and item recorded before filming. These source MP4 files are not separately encrypted by the app while the camera records or the video awaits preparation. They survive closing the app and are recovered for the same account when it reopens. The source is removed after the prepared video has been safely saved in the encrypted upload queue, or if you explicitly discard the recording.

Camera access is used for taking photos, recording item videos and scanning item or shelf barcodes. Barcode recognition runs on the phone. Free photos are compressed JPEGs up to 2048 pixels. Standard and Ultra camera photos default to full-resolution JPEG quality 92. Optional lossless mode transfers unedited camera files without added compression and saves edits as PNG. Signing out keeps unsynced media and recoverable recordings for that same account; uninstalling the app removes its local data.

Android barcode scanning uses Google ML Kit. Although barcode recognition runs on your phone, the SDK collects device and app information, installation identifiers and diagnostic information such as performance, configuration and error events for diagnostics and usage analytics. Google documents this collection in its ML Kit data disclosure. This SDK information is transmitted using HTTPS.

PicToPC is operated by Continue Technology. Contact details are available at Continue Technology.